From f833dbf50059ff7d4ea42ce7bbb3a5cdcf7a6929 Mon Sep 17 00:00:00 2001
From: Karl Ludwig Weise <ludwig@ludwigweise.de>
Date: Tue, 5 May 2026 11:59:55 +0200
Subject: [PATCH] Remove auth cookie only after logout call to api

---
 src/routes/(pages)/logout/+page.server.ts | 10 +++-------
 1 file changed, 3 insertions(+), 7 deletions(-)

diff --git a/src/routes/(pages)/logout/+page.server.ts b/src/routes/(pages)/logout/+page.server.ts
index 4686081..d93832d 100644
--- a/src/routes/(pages)/logout/+page.server.ts
+++ b/src/routes/(pages)/logout/+page.server.ts
@@ -1,14 +1,8 @@
+import { removeAuthCookies } from "$lib/server/utils/cookies";
 import { auth } from "$lib/stores/auth";
 import type { PageServerLoad } from "./$types";
 
 export const load: PageServerLoad = async (event) => {
-  event.cookies.delete("access_token", {
-    path: "/",
-    httpOnly: true,
-    secure: true,
-    sameSite: "strict",
-  });
-
   const success: Promise<boolean> = event
     .fetch("/api/auth/logout", {
       method: "POST",
@@ -21,6 +15,8 @@ export const load: PageServerLoad = async (event) => {
       return resp.status < 400;
     });
 
+  removeAuthCookies(event);
+
   auth.reset();
 
   return { streaming: { success } };