delete cookie on logout

Massimo Melina committed Feb 28, 2026 at 16:57 UTC 44da48c6bcf4ab5dc640eeb9d28e2037fb7c71fd
1 file changed +2 -2
src/auth.ts
+2 -2
@@ -58,10 +58,10 @@ export async function setLoggedIn(ctx: Context, username: string | false) {
58 if (s.username)
59 events.emit('logout', ctx)
60 delete ctx.state.account
61 - delete s.username
62 - delete s.allowNet
61 + ctx.session = null
62 return
63 }
64 + delete s.loggingIn // clear pending SRP handshake state
65 const a = ctx.state.account = getAccount(username)
66 if (!a) return
67 await events.emitAsync('finalizingLogin', { ctx, username, inputs: { ...ctx.state.params, ...ctx.query } })