Code Faster with an AI That Thinks Like You
Ship better products, in less time

// Fixed: Token blacklisted + cookie secured
async function logout(req, res) {
  const token = req.headers.authorization?.split(' ')[1];
  if (token) {
    const decoded = jwt.decode(token);
    const ttl = decoded.exp - Math.floor(Date.now() / 1000);
    await redis.setex(`blacklist:${token}`, ttl, 'true');
  }
  res.clearCookie('session', { httpOnly: true, secure: true });
  res.json({ message: 'Logged out successfully' });
}

const getActiveAdmins = (users) =>
  users
    .filter({ status, role } =>
      status === 'active' && role === 'admin'
    )
    .map({ id, name, email, role } =>
      ({ id, name, email, role })
    );

const rateLimit = (options = {}) => {
  const {
    windowMs = 15 * 60 * 1000,
    max = 100,
    keyPrefix = 'rl',
    message = 'Too many requests'
  } = options;

  return async (req, res, next) => {
    const key = `${keyPrefix}:${req.ip}`;
    const requests = await redis.incr(key);
    if (requests === 1) await redis.pexpire(key, windowMs);
    const ttl = await redis.pttl(key);

    res.set({
      'X-RateLimit-Limit': max,
      'X-RateLimit-Remaining': Math.max(0, max - requests),
      'X-RateLimit-Reset': new Date(Date.now() + ttl).toISOString()
    });

    if (requests > max) {
      return res.status(429).json({
        error: message,
        retryAfter: Math.ceil(ttl / 1000)
      });
    }
    next();
  };
};