Implemented Logout and Logout-All Sessions Endpoints

[Sandijigs]

PR: Implement Logout and Logout-All Sessions Endpoints

📋 Description

This PR implements two authentication-related endpoints for user session management:

1. Single Session Logout (POST /auth/logout) - Invalidates the current user session/token
2. Multi-Session Logout (POST /auth/logout-all) - Invalidates all active sessions/tokens for the authenticated user across all devices

Both endpoints follow authentication best practices with proper token invalidation, error handling, and security measures.

✨ Changes Made

Endpoints Implemented

• ✅ POST /auth/logout - Logs out the current session

  • Invalidates the current authentication token
  • Removes session data from storage
  • Returns appropriate success/error responses

• ✅ POST /auth/logout-all - Logs out all sessions

  • Invalidates all tokens associated with the authenticated user
  • Clears all active sessions across devices
  • Returns appropriate success/error responses

Security & Error Handling

• ✅ Authentication middleware ensures only authenticated users can access these endpoints
• ✅ Proper error handling for edge cases:
  • Invalid or expired tokens
  • Missing authentication credentials
  • Non-existent sessions
• ✅ Appropriate HTTP status codes and error messages

Testing

• ✅ Server runs without runtime errors
• ✅ Endpoints tested with valid and invalid tokens
• ✅ Verified session invalidation works correctly
• ✅ Confirmed multi-device logout functionality

Screenshot

Closes #309

🧪 Testing Instructions

1. Start the server
2. Authenticate a user to get a valid token
3. Test single logout:

   curl -X POST http://localhost:PORT/auth/logout \
     -H "Authorization: Bearer YOUR_TOKEN"

[vercel]

@Sandijigs is attempting to deploy a commit to the naijabuz's projects Team on Vercel.

A member of the Team first needs to authorize it.

[yusuftomilola]

Thank you. Will resolve the other errors on my end.