From 0cf9e416f3a9aa15ce3f545127cc18b13b5e6773 Mon Sep 17 00:00:00 2001
From: Sebastian Mateos Nicolajsen
 <80953876+sebastiannicolajsen@users.noreply.github.com>
Date: Tue, 12 Oct 2021 11:09:38 +0200
Subject: [PATCH] Allow the user to log out (#459)

---
 .../src/api/routes/admin/auth/delete-session.js | 17 +++++++++++++++++
 .../medusa/src/api/routes/admin/auth/index.js   |  6 ++++++
 2 files changed, 23 insertions(+)
 create mode 100644 packages/medusa/src/api/routes/admin/auth/delete-session.js

diff --git a/packages/medusa/src/api/routes/admin/auth/delete-session.js b/packages/medusa/src/api/routes/admin/auth/delete-session.js
new file mode 100644
index 0000000000..7316311fea
--- /dev/null
+++ b/packages/medusa/src/api/routes/admin/auth/delete-session.js
@@ -0,0 +1,17 @@
+import _ from "lodash"
+
+/**
+ * @oas [get] /auth
+ * operationId: "DeleteAuth"
+ * summary: "Delete Session"
+ * description: "Deletes the current session for the logged in user."
+ * tags:
+ *   - Auth
+ * responses:
+ *  "200":
+ *    description: OK
+ */
+export default async (req, res) => {
+  req.session.destroy()
+  res.status(200).end()
+}
diff --git a/packages/medusa/src/api/routes/admin/auth/index.js b/packages/medusa/src/api/routes/admin/auth/index.js
index 3a8a9f896a..b74d357a8f 100644
--- a/packages/medusa/src/api/routes/admin/auth/index.js
+++ b/packages/medusa/src/api/routes/admin/auth/index.js
@@ -13,5 +13,11 @@ export default app => {
   )
   route.post("/", middlewares.wrap(require("./create-session").default))
 
+  route.delete(
+    "/",
+    middlewares.authenticate(),
+    middlewares.wrap(require("./delete-session").default)
+  )
+
   return app
 }