import { corsJson, preflight } from "@/lib/cors";
import { revokeToken } from "@/lib/oauth";

/** Token revocation (RFC 7009): an agent signing out ends its grant. Always answers 200. */
export async function POST(request: Request) {
  const form = await request.formData().catch(() => null);
  const token = form?.get("token");
  if (typeof token === "string" && token) await revokeToken(token);
  return corsJson({});
}

export const OPTIONS = preflight;