import { beforeEach, describe, expect, it } from 'vitest';

import { POST } from '../../../../../src/app/api/auth/logout/route';

describe('Unit — /api/auth/logout route', () => {
  beforeEach(() => {
    process.env.FRONTEND_ORIGIN = 'http://localhost:3000';
  });

  it('returns success and clears auth cookie', async () => {
    const res = await POST();

    expect(res.status).toBe(200);
    expect(await res.json()).toEqual({ message: 'Logout successful' });
    expect(res.headers.get('Access-Control-Allow-Origin')).toBe('http://localhost:3000');
    expect(res.headers.get('Access-Control-Allow-Credentials')).toBe('true');
    expect(res.headers.get('set-cookie')).toContain('auth_token=');
    expect(res.headers.get('set-cookie')).toContain('Max-Age=0');
  });
});