From 1c52281feb8a4195d9f71f2ec46abb5f8585c0c5 Mon Sep 17 00:00:00 2001
From: Samu <me@samu.lol>
Date: Sat, 29 Aug 2026 15:31:36 +0200
Subject: [PATCH] refactor: type auth preHandlers and mirror clearCookie
 options

---
 server/src/routes/authRoutes.ts | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/server/src/routes/authRoutes.ts b/server/src/routes/authRoutes.ts
index d035cbb..0a95aae 100644
--- a/server/src/routes/authRoutes.ts
+++ b/server/src/routes/authRoutes.ts
@@ -1,4 +1,4 @@
-import { FastifyInstance } from 'fastify'
+import { FastifyInstance, FastifyReply, FastifyRequest } from 'fastify'
 import {
   hashPassword,
   verifyPassword,
@@ -45,7 +45,7 @@ export function cookieOpts() {
   }
 }
 
-export async function requireAuth(request: any, reply: any): Promise<void> {
+export async function requireAuth(request: FastifyRequest, reply: FastifyReply): Promise<void> {
   const token = request.cookies[COOKIE_NAME]
   if (token) {
     const user = getUserBySession(request.server.db, token)
@@ -57,7 +57,7 @@ export async function requireAuth(request: any, reply: any): Promise<void> {
   await reply.code(401).send({ error: 'unauthorized' })
 }
 
-export async function requireAdmin(request: any, reply: any): Promise<void> {
+export async function requireAdmin(request: FastifyRequest, reply: FastifyReply): Promise<void> {
   if (!request.user || request.user.is_admin !== 1) {
     await reply.code(403).send({ error: 'forbidden' })
   }
@@ -100,7 +100,7 @@ export async function registerAuthRoutes(app: FastifyInstance): Promise<void> {
   app.post('/api/logout', async (request, reply) => {
     const token = request.cookies[COOKIE_NAME]
     if (token) deleteSession(request.server.db, token)
-    return reply.clearCookie(COOKIE_NAME, { path: '/' }).code(200).send({ ok: true })
+    return reply.clearCookie(COOKIE_NAME, cookieOpts()).code(200).send({ ok: true })
   })
 
   app.get('/api/me', { preHandler: [requireAuth] }, async (request) => {