fix(auth): выходить через портал /logout вместо SSO return_to

Иначе живая сессия портала сразу возвращала JWT в приложение.

Co-authored-by: Cursor <[email protected]>

apps/web/src/components/layout/nav-user.tsx

@@ -39,7 +39,7 @@ import {
   clearToken,
   getClaims,
   isAuthEnabled,
-  redirectToPortalLogin,
+  redirectToPortalLogout,
   resetPortalHandoff,
 } from '@/lib/auth'
 
@@ -130,7 +130,7 @@ export function NavUser() {
   function handleSignOut() {
     clearToken()
     resetPortalHandoff()
-    redirectToPortalLogin()
+    redirectToPortalLogout()
   }
 
   return (

apps/web/src/lib/auth.ts

@@ -146,6 +146,14 @@ export function redirectToPortalLogin(returnTo?: string): boolean {
   return true
 }
 
+/** End portal SSO session (refresh cookie + portal token). Do not pass return_to. */
+export function redirectToPortalLogout(): void {
+  clearToken()
+  resetPortalHandoff()
+  const url = `${authPortalUrl()}/logout`
+  window.location.assign(url)
+}
+
 export function parseHashToken(hash: string): {
   accessToken: string | null
   expiresAt: string | null