Logout route.

server/auth.js

@@ -126,6 +126,10 @@ auth.post('/:strategy/login', (req, res, next) =>
   })(req, res, next)
 )
 
+auth.post('/logout', (req, res, next) => {
+  req.logout()
+  res.redirect('/api/auth/whoami')
+})
 
 module.exports = auth
 

server/auth.test.js

@@ -52,7 +52,7 @@ describe('/api/auth', () => {
           .then(res => expect(res.body).to.contain({
             email: alice.username
           }))
-      )
+      )      
     })
 
     it('when not logged in, responds with an empty object', () =>
@@ -61,4 +61,23 @@ describe('/api/auth', () => {
         .then(res => expect(res.body).to.eql({}))
     )
   })
+
+  describe('POST /logout when logged in', () => {
+    const agent = request.agent(app)
+
+    before('log in', () => agent
+      .post('/api/auth/local/login') 
+      .send(alice))
+
+    it('logs you out and redirects to whoami', () => agent
+      .post('/api/auth/logout')
+      .expect(302)
+      .expect('Location', '/api/auth/whoami')
+      .then(() =>
+        agent.get('/api/auth/whoami')
+          .expect(200)
+          .then(rsp => expect(rsp.body).eql({}))
+      )
+    )
+  })
 })