Unable to delete session cookie

[bbrks]

Cross-posting response from GitHub Issue.

@bbrks@github.com - https://github.com/couchbase/sync_gateway/issues/4552#issuecomment-613466149

Are you able to send the request for a new session without the old cookie by using XMLHttpRequest.withCredentials=false?

If not, this does look like a bit of a gap if the client is unable to clear its own cookies.

As a workaround, you can use basic auth along with sending the old cookie in a DELETE session request.

15:07 $ curl -i -c sgcookie -b sgcookie -X DELETE http://demo:password3@localhost:4984/db1/_session
HTTP/1.1 200 OK
Server: /2.8 branch/ commit/ EE
Set-Cookie: SyncGatewaySession=; Expires=Tue, 14 Apr 2020 14:07:31 GMT
Date: Tue, 14 Apr 2020 14:07:31 GMT
Content-Length: 0