fix: always delete rpc cookie (#558)

Author: qstearns

server/internal/middleware/session.go

@@ -2,6 +2,7 @@ package middleware
 
 import (
 	"net/http"
+	"strings"
 
 	"github.com/speakeasy-api/gram/server/internal/contextvalues"
 )
@@ -13,6 +14,16 @@ func SessionMiddleware(next http.Handler) http.Handler {
 			ctx := contextvalues.SetSessionTokenInContext(r.Context(), cookie.Value)
 			r = r.WithContext(ctx)
 		}
+		if strings.HasSuffix(r.URL.Path, "rpc/auth.info") {
+			http.SetCookie(w, &http.Cookie{
+				Name:     "gram_session",
+				Value:    "",
+				MaxAge:   -1,
+				Path:     "/rpc",
+				HttpOnly: true,
+				Secure:   true,
+			})
+		}
 		next.ServeHTTP(w, r)
 	})
 }