Fixes

.tiny-brain/
└── auth-flow/
    ├── epic.md
    └── logout-redirect-bug.md    ← this is what we're documenting

---
id: logout-redirect-bug
type: fix
epic: auth-flow
title: Logout redirects to /undefined
severity: high
phase: development
status: in_progress
created: 2026-05-20
updated: 2026-05-20
---

# Logout redirects to /undefined

## Description

After clicking "Sign out", the user is redirected to `/undefined` instead of
`/login`. Reported by 4 customers on 2026-05-18.

## Reproduction Steps

1. Sign in as any user
2. Open the user menu in the navbar
3. Click "Sign out"
4. **Expected**: redirect to `/login`
5. **Actual**: redirect to `/undefined`, page 404s

## Root Cause

`session.signOut()` returns the next URL as `undefined` when the session has
already been cleared. The handler reads `.next` without a fallback.

## Tasks

### 1. Add a fallback to the redirect target
status: completed

Default to `/login` when `session.signOut().next` is missing.

**Files to modify/create:**
- `src/server/auth/sign-out.ts`

**Expected changes:**
- Fallback to `/login` when `next` is falsy
- Regression test that mocks an already-cleared session

### 2. Backfill regression test
status: in_progress

[...]