From 83279b536fb6e288b8c263dc42a6ea3c109baa00 Mon Sep 17 00:00:00 2001
From: Bruno Charest <bruno.charest@gmail.com>
Date: Tue, 16 Jun 2026 12:43:50 -0400
Subject: [PATCH] fix: logout supprime access_token cookie + bouton toujours
 visible

- Backend: delete_cookie access_token (/) + refresh_token
- Logout ne requiert plus auth (graceful si token expire)
- Bouton Deconnexion toujours visible dans le menu
---
 backend/auth/router.py | 13 ++++++++-----
 frontend/index.html    |  1 -
 frontend/js/config.js  |  7 ++-----
 3 files changed, 10 insertions(+), 11 deletions(-)

diff --git a/backend/auth/router.py b/backend/auth/router.py
index eee651c..23992b8 100644
--- a/backend/auth/router.py
+++ b/backend/auth/router.py
@@ -217,18 +217,21 @@ async def refresh_token_endpoint(request: Request, response: Response):
 async def logout(
     request: Request,
     response: Response,
-    current_user=Depends(require_auth),
 ):
-    """Logout: revoke refresh token and delete cookie."""
+    """Logout: revoke refresh token and delete cookies."""
     refresh_tok = request.cookies.get("refresh_token")
     if refresh_tok:
         payload = decode_token(refresh_tok)
         if payload:
-            revoke_token(payload["jti"])
+            try:
+                revoke_token(payload["jti"])
+            except Exception:
+                pass  # token already revoked
 
     response.delete_cookie("refresh_token", path="/api/auth/refresh")
-    logger.info(f"User '{current_user['username']}' logged out")
-    return {"message": "Déconnecté avec succès"}
+    response.delete_cookie("access_token", path="/")
+    response.delete_cookie("access_token", path="/api")  # just in case
+    return {"message": "Deconnecte avec succes"}
 
 
 @router.get("/me")
diff --git a/frontend/index.html b/frontend/index.html
index 5507458..7eb22c3 100644
--- a/frontend/index.html
+++ b/frontend/index.html
@@ -662,7 +662,6 @@
                                     id="logout-btn"
                                     type="button"
                                     role="menuitem"
-                                    style="display:none"
                                 >
                                     <span
                                         class="menu-list-icon"
diff --git a/frontend/js/config.js b/frontend/js/config.js
index 799cffc..5c34f05 100644
--- a/frontend/js/config.js
+++ b/frontend/js/config.js
@@ -630,12 +630,9 @@ function initConfigModal() {
     });
   }
 
-  // Logout button
+  // Logout button (always visible)
   var logoutBtn = document.getElementById("logout-btn");
-  if (logoutBtn && AuthManager && AuthManager._authEnabled) {
-    // Show if user is logged in
-    var user = AuthManager.getCurrentUser();
-    if (user) logoutBtn.style.display = '';
+  if (logoutBtn) {
     logoutBtn.addEventListener("click", function() {
       if (confirm("Voulez-vous vraiment vous deconnecter ?")) {
         fetch("/api/auth/logout", { method: "POST" })