// POST /api/auth/logout — 退出登录
import { NextResponse } from 'next/server'
import { authConfig } from '@/lib/auth-config'

export async function POST() {
  // 清除 tlyq_session cookie
  const logoutUrl = `${authConfig.autheliaUrl}/api/oidc/end_session`
  const response = NextResponse.redirect(logoutUrl)
  response.cookies.set('tlyq_session', '', { httpOnly: true, secure: false, sameSite: 'lax', domain: authConfig.cookieDomain, path: '/', maxAge: 0 })
  return response
}