From 8bbf973097867e53164f9ba6df81068ce1622fc0 Mon Sep 17 00:00:00 2001
From: bruno <bruno.charest@gmail.com>
Date: Fri, 24 Jul 2026 10:03:10 -0400
Subject: [PATCH] fix: proper logout via window.handleLogout with XHR fallback
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Both buttons call window.handleLogout (AuthManager.logout) or doLogoutFallback
- doLogoutFallback: XHR POST, hides #app, shows #login-screen, clears token
- No more localStorage.clear() or hard redirect — mimics showLoginScreen()
- Removed all conflicting JS event listeners
---
 frontend/index.html | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/frontend/index.html b/frontend/index.html
index a04201d..4b810f9 100644
--- a/frontend/index.html
+++ b/frontend/index.html
@@ -656,12 +656,13 @@
                                         >
                                     </span>
                                 </button>
+                                <script>function doLogoutFallback(){var x=new XMLHttpRequest();x.open('POST','/api/auth/logout');x.withCredentials=true;x.onload=function(){var a=document.getElementById('app');var l=document.getElementById('login-screen');if(a)a.classList.add('hidden');if(l)l.classList.remove('hidden');try{localStorage.removeItem('obsigate-token')}catch(e){}};x.send()}</script>
                                 <button
                                     class="menu-list-row menu-list-button"
                                     id="logout-btn"
                                     type="button"
                                     role="menuitem"
-                                    onclick="fetch('/api/auth/logout',{method:'POST',credentials:'include'}).then(function(){localStorage.clear();window.location.href='/'}).catch(function(){localStorage.clear();window.location.href='/'})"
+                                    onclick="if(window.handleLogout)window.handleLogout();else{doLogoutFallback()}"
                                 >
                                     <span
                                         class="menu-list-icon"
@@ -2007,7 +2008,7 @@
                                         <input type="text" id="profile-name" class="config-input" placeholder="Votre nom" maxlength="60">
                                     </div>
                                     <button class="config-save-btn" id="profile-save" data-i18n="config.save">Enregistrer</button>
-                                    <button class="config-save-btn" id="profile-logout" style="background:var(--danger-bg);color:var(--danger);border-color:var(--danger);margin-left:8px" data-i18n="config.logout" onclick="if(window.handleLogout)window.handleLogout();else{fetch('/api/auth/logout',{method:'POST',credentials:'include'}).finally(function(){window.location.href='/'})}">Déconnexion</button>
+                                    <button class="config-save-btn" id="profile-logout" style="background:var(--danger-bg);color:var(--danger);border-color:var(--danger);margin-left:8px" data-i18n="config.logout" onclick="if(window.handleLogout)window.handleLogout();else{doLogoutFallback()}">Déconnexion</button>
                                     <span class="profile-saved" id="profile-saved" style="display:none" data-i18n="config.saved">✓ Sauvegardé</span>
                                 </div>
                             </section>