Add POST /api/v1/users/sign-out

src/api/routes/users.ts

@@ -48,6 +48,21 @@ router.post("/sign-in", async (_req, res) => {
     });
 });
 
+router.post("/sign-out", async (req, res) => {
+    const user: User = res.locals.user;
+
+    if (!user.signed_in) {
+        return res.status(400).json({
+            description: `${user.first_name} ${user.last_name} is not signed in!`,
+        });
+    }
 
+    await updateUser(user.user_id, { signed_in: false });
+    await createSession(user.user_id, user.last_signed_in, Date.now(), false);
+
+    return res.status(200).json({
+        description: `Signed out as ${user.first_name} ${user.last_name}`
+    });
+});
 
 export default router;

src/models/Session.model.ts

@@ -33,23 +33,15 @@ async function getSessionsByPassword(password: number): Promise<SessionRowDataPa
 }
 
 async function createSession(
-    password: number,
+    user_id: number,
     start_time: number,
+    end_time: number,
     amended: boolean,
-    end_time?: number
 ): Promise<boolean> {
-    let sql: string;
-    let params: any[];
-
-    if (amended) {
-        sql =
-            "INSERT INTO `sessions` (user_id, start_time, end_time, amended) SELECT user_id, ?, ?, ? FROM users WHERE password = ?)";
-        params = [start_time, end_time, amended, password];
-    } else {
-        sql =
-            "INSERT INTO `sessions` (user_id, start_time, amended) SELECT user_id, ?, ? FROM users WHERE password = ?)";
-        params = [start_time, amended, password];
-    }
+    const sql =
+        "INSERT INTO `sessions` (user_id, start_time, end_time, amended) SELECT user_id, ?, ?, ? FROM users WHERE user_id = ?)";
+    const params = [start_time, end_time, amended, user_id];
+
     const [resHeader] = await database.query<ResultSetHeader>(sql, params);
 
     return resHeader.affectedRows === 1;