fix logout

remove DID_I_FINALLY_ADD_HTTPS

routes/api/userRoutes.js

@@ -141,7 +141,7 @@ export const setup = function (router, con, server) {
                     let ip = getIP(req);
                     let setTo = `${res.locals.username} ${SHA256(req.body.newPW, res.locals.username, HASHES_COOKIE)}`
                     let cookiesigned = signature.sign(setTo, cookiesecret + ip);
-                    res.cookie('AUTH_COOKIE', cookiesigned, { maxAge: Math.pow(10, 10), httpOnly: true, secure: DID_I_FINALLY_ADD_HTTPS });
+                    res.cookie('AUTH_COOKIE', cookiesigned, { maxAge: Math.pow(10, 10), httpOnly: true, secure: true });
                     res.json({ "success": "successfully changed password" });
                 });
             }
@@ -197,7 +197,7 @@ export const setup = function (router, con, server) {
                         let ip = getIP(req);
                         let setTo = `${req.body.newUsername} ${SHA256(req.body.currentPW, req.body.newUsername, HASHES_COOKIE)}`
                         let cookiesigned = signature.sign(setTo, cookiesecret + ip);
-                        res.cookie('AUTH_COOKIE', cookiesigned, { maxAge: Math.pow(10, 10), httpOnly: true, secure: DID_I_FINALLY_ADD_HTTPS });
+                        res.cookie('AUTH_COOKIE', cookiesigned, { maxAge: Math.pow(10, 10), httpOnly: true, secure: true });
                         //updated username in the users table, but not yet on posts
                         //TODO: update username on dms
                         let sql = `update ipost.posts set post_user_name=? where post_user_name=?;`; //change username of every past post sent

routes/logout.js

@@ -0,0 +1,10 @@
+export const setup = function (router, con, server) {
+
+    const increaseUSERCall = server.increaseUSERCall
+
+    router.get("/logout",  function (req, res) {
+        if (!increaseUSERCall(req, res))return;
+        res.cookie("AUTH_COOKIE", "", { maxAge: 0, httpOnly: true, secure: true });
+        res.redirect("/");
+    });
+}

routes/setup_all_routes.js

@@ -12,6 +12,8 @@ import { setup as servefilessetup} from "./serve_static_files.js"
 import { setup as userfilessetup} from "./userfiles.js"
 import { setup as userauthsetup} from "./user_auth.js"
 import { setup as applicationsetup} from "./authorize.js"
+import { setup as logoutsetup} from "./logout.js"
+
 
 export const setup = function (router, con, server) {
     const setuproute = handler => handler(router,con,server)
@@ -27,6 +29,7 @@ export const setup = function (router, con, server) {
     setuproute(getpostssetup)
     setuproute(userroutessetup)
     setuproute(servefilessetup)
+    setuproute(logoutsetup)
     let global_page_variables = {
         getPID: get_pid,
         getDMPID: get_dmpid,