make logout delete the session

epicweb-dev · Aug 3, 2023 · a97c003 · a97c003
1 parent 23c6411
commit a97c003
Show file tree

Hide file tree

Showing 43 changed files with 87 additions and 0 deletions.
diff --git a/exercises/09.managed-sessions/02.solution.auth-utils/app/utils/auth.server.ts b/exercises/09.managed-sessions/02.solution.auth-utils/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(userIdKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(userIdKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/09.managed-sessions/03.problem.session-cookie/app/utils/auth.server.ts b/exercises/09.managed-sessions/03.problem.session-cookie/app/utils/auth.server.ts
@@ -116,6 +116,9 @@ export async function signup({
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
 	// 🐨 this should be sessionKey instead of userIdKey
+	const sessionId = cookieSession.get(userIdKey)
+	await prisma.session.delete({ where: { id: sessionId } })
+	// 🐨 this should be sessionKey instead of userIdKey
 	cookieSession.unset(userIdKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/09.managed-sessions/03.solution.session-cookie/app/utils/auth.server.ts b/exercises/09.managed-sessions/03.solution.session-cookie/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/09.managed-sessions/04.problem.delete-sessions/app/utils/auth.server.ts b/exercises/09.managed-sessions/04.problem.delete-sessions/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/09.managed-sessions/04.solution.delete-sessions/app/utils/auth.server.ts b/exercises/09.managed-sessions/04.solution.delete-sessions/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/10.email/01.problem.resend/app/utils/auth.server.ts b/exercises/10.email/01.problem.resend/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/10.email/01.solution.resend/app/utils/auth.server.ts b/exercises/10.email/01.solution.resend/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/10.email/02.problem.mocks/app/utils/auth.server.ts b/exercises/10.email/02.problem.mocks/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/10.email/02.solution.mocks/app/utils/auth.server.ts b/exercises/10.email/02.solution.mocks/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/10.email/03.problem.send/app/utils/auth.server.ts b/exercises/10.email/03.problem.send/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/10.email/03.solution.send/app/utils/auth.server.ts b/exercises/10.email/03.solution.send/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/10.email/04.problem.session/app/utils/auth.server.ts b/exercises/10.email/04.problem.session/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/10.email/04.solution.session/app/utils/auth.server.ts b/exercises/10.email/04.solution.session/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/11.verification/01.problem.schema/app/utils/auth.server.ts b/exercises/11.verification/01.problem.schema/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/11.verification/01.solution.schema/app/utils/auth.server.ts b/exercises/11.verification/01.solution.schema/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/11.verification/02.problem.totp/app/utils/auth.server.ts b/exercises/11.verification/02.problem.totp/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/11.verification/02.solution.totp/app/utils/auth.server.ts b/exercises/11.verification/02.solution.totp/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/11.verification/03.problem.verify-code/app/utils/auth.server.ts b/exercises/11.verification/03.problem.verify-code/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/11.verification/03.solution.verify-code/app/utils/auth.server.ts b/exercises/11.verification/03.solution.verify-code/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/12.reset-password/01.problem.handle-verification/app/utils/auth.server.ts b/exercises/12.reset-password/01.problem.handle-verification/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/12.reset-password/01.solution.handle-verification/app/utils/auth.server.ts b/exercises/12.reset-password/01.solution.handle-verification/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/12.reset-password/02.problem.reset-password/app/utils/auth.server.ts b/exercises/12.reset-password/02.problem.reset-password/app/utils/auth.server.ts
@@ -111,6 +111,8 @@ export async function signup({
 
 export async function logout(request: Request) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect('/', {
 		headers: { 'set-cookie': await commitSession(cookieSession) },

diff --git a/exercises/12.reset-password/02.solution.reset-password/app/utils/auth.server.ts b/exercises/12.reset-password/02.solution.reset-password/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/13.change-email/01.problem.totp/app/utils/auth.server.ts b/exercises/13.change-email/01.problem.totp/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/13.change-email/01.solution.totp/app/utils/auth.server.ts b/exercises/13.change-email/01.solution.totp/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/13.change-email/02.problem.handle-verification/app/utils/auth.server.ts b/exercises/13.change-email/02.problem.handle-verification/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/13.change-email/02.solution.handle-verification/app/utils/auth.server.ts b/exercises/13.change-email/02.solution.handle-verification/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/14.enable-2fa/01.problem.init/app/utils/auth.server.ts b/exercises/14.enable-2fa/01.problem.init/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/14.enable-2fa/01.solution.init/app/utils/auth.server.ts b/exercises/14.enable-2fa/01.solution.init/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/14.enable-2fa/02.problem.qr-code/app/utils/auth.server.ts b/exercises/14.enable-2fa/02.problem.qr-code/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/14.enable-2fa/02.solution.qr-code/app/utils/auth.server.ts b/exercises/14.enable-2fa/02.solution.qr-code/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/14.enable-2fa/03.problem.verify/app/utils/auth.server.ts b/exercises/14.enable-2fa/03.problem.verify/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/14.enable-2fa/03.solution.verify/app/utils/auth.server.ts b/exercises/14.enable-2fa/03.solution.verify/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/15.verify-2fa/01.problem.unverified/app/utils/auth.server.ts b/exercises/15.verify-2fa/01.problem.unverified/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/15.verify-2fa/01.solution.unverified/app/utils/auth.server.ts b/exercises/15.verify-2fa/01.solution.unverified/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/15.verify-2fa/02.problem.verify/app/utils/auth.server.ts b/exercises/15.verify-2fa/02.problem.verify/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/15.verify-2fa/02.solution.verify/app/utils/auth.server.ts b/exercises/15.verify-2fa/02.solution.verify/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/16.2fa-check/01.problem.delete/app/utils/auth.server.ts b/exercises/16.2fa-check/01.problem.delete/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/16.2fa-check/01.solution.delete/app/utils/auth.server.ts b/exercises/16.2fa-check/01.solution.delete/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/16.2fa-check/02.problem.reverify/app/utils/auth.server.ts b/exercises/16.2fa-check/02.problem.reverify/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/16.2fa-check/02.solution.reverify/app/utils/auth.server.ts b/exercises/16.2fa-check/02.solution.reverify/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/16.2fa-check/03.problem.change-email/app/utils/auth.server.ts b/exercises/16.2fa-check/03.problem.change-email/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,

diff --git a/exercises/16.2fa-check/03.solution.change-email/app/utils/auth.server.ts b/exercises/16.2fa-check/03.solution.change-email/app/utils/auth.server.ts
@@ -142,6 +142,8 @@ export async function logout(
 	responseInit?: ResponseInit,
 ) {
 	const cookieSession = await getSession(request.headers.get('cookie'))
+	const sessionId = cookieSession.get(sessionKey)
+	await prisma.session.delete({ where: { id: sessionId } })
 	cookieSession.unset(sessionKey)
 	throw redirect(safeRedirect(redirectTo), {
 		...responseInit,