import {NextResponse} from 'next/server';
import { ACCESS_COOKIE,REFRESH_COOKIE,cookieOptions,sameOrigin } from '../../../lib/meshkee/session';
export async function POST(request:Request){
 if(!sameOrigin(request))return NextResponse.json({message:'درخواست نامعتبر است.'},{status:403});
 const response=NextResponse.json({ok:true});
 for(const name of [ACCESS_COOKIE,REFRESH_COOKIE]){
  response.cookies.set(name,'',{...cookieOptions(request),maxAge:0});
  // Also expire a host-only cookie left by a local/older deployment.
  if(cookieOptions(request).domain)response.headers.append('Set-Cookie',`${name}=; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax`);
 }
 return response;
}