Clear cookie on sign out

Signed-off-by: Émile Ré <emile@getprobo.com>

pkg/server/api/authn/cookie.go

@@ -34,6 +34,10 @@ func (c *Cookie) Set(w http.ResponseWriter, session *coredata.Session) {
 	)
 }
 
+func (c *Cookie) Clear(w http.ResponseWriter, session *coredata.Session) {
+	securecookie.Clear(w, c.sessionCookieConfig(time.Until(session.ExpiredAt)))
+}
+
 func NewCookie(config *securecookie.Config) *Cookie {
 	return &Cookie{config}
 }

pkg/server/api/connect/v1/v1_resolver.go

@@ -426,6 +426,9 @@ func (r *mutationResolver) SignOut(ctx context.Context) (*types.SignOutPayload,
 		return nil, gqlutils.Internal(ctx)
 	}
 
+	w := gqlutils.HTTPResponseWriterFromContext(ctx)
+	r.sessionCookie.Clear(w, session)
+
 	return &types.SignOutPayload{Success: true}, nil
 }