Node.js JWT Logout With HTTP Only Cookie

logout.js

import { serialize } from 'cookie';

export default function logout(req, res) {
  const { cookies } = req;

  const jwt = cookies.token;

  if (!jwt) {
    return res.status(401).json({
      status: 'error',
      error: 'Unauthorized',
    });
  }

  const serialized = serialize('token', null, {
    httpOnly: true,
    secure: process.env.NODE_ENV === 'production',
    sameSite: 'strict',
    maxAge: -1,
    path: '/',
  });
  res.setHeader('Set-Cookie', serialized);
  res.status(200).json({
    status: 'success',
    message: 'Logged out',
  });
}