<?php
// POST /api/auth/logout.php
require_once __DIR__ . '/../init.php';

$refreshToken = $_COOKIE['refreshToken'] ?? '';
if ($refreshToken) {
    $db   = DB::conn();
    $stmt = $db->prepare('DELETE FROM user_sessions WHERE refresh_token = ?');
    $stmt->execute([$refreshToken]);
    clearRefreshCookie();
}
Response::success('Logged out successfully.');