From b8fcc3a196754dce21d6f5df66f990300d78c763 Mon Sep 17 00:00:00 2001
From: Samir Boulahtit <samir.boulahtit@wizard.lu>
Date: Sun, 28 Dec 2025 18:30:13 +0100
Subject: [PATCH] fix: add logout button to vendor onboarding page
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The onboarding page was a standalone page with no way to log out,
leaving users stuck. Added:
- Logout button in the header
- handleLogout() function to clear vendor tokens and redirect to login

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 app/templates/vendor/onboarding.html |  6 ++++++
 static/vendor/js/onboarding.js       | 29 ++++++++++++++++++++++++++++
 2 files changed, 35 insertions(+)

diff --git a/app/templates/vendor/onboarding.html b/app/templates/vendor/onboarding.html
index e866cc0c..31a3177b 100644
--- a/app/templates/vendor/onboarding.html
+++ b/app/templates/vendor/onboarding.html
@@ -23,6 +23,12 @@
                     </div>
                     <span class="text-xl font-semibold text-gray-800 dark:text-white">Wizamart</span>
                 </div>
+                <!-- Logout Button -->
+                <button @click="handleLogout()"
+                        class="mr-4 px-3 py-2 text-sm font-medium text-gray-600 dark:text-gray-300 hover:text-gray-900 dark:hover:text-white hover:bg-gray-100 dark:hover:bg-gray-700 rounded-lg transition-colors">
+                    Logout
+                </button>
+
                 <!-- Language Selector -->
                 <div class="relative" x-data="{ open: false }">
                     <button @click="open = !open"
diff --git a/static/vendor/js/onboarding.js b/static/vendor/js/onboarding.js
index 6f4d2724..3c5828af 100644
--- a/static/vendor/js/onboarding.js
+++ b/static/vendor/js/onboarding.js
@@ -603,6 +603,35 @@ function vendorOnboarding(initialLang = 'en') {
             }
         },
 
+        // Logout handler
+        async handleLogout() {
+            console.log('🚪 Logging out from onboarding...');
+
+            // Get vendor code from URL
+            const path = window.location.pathname;
+            const segments = path.split('/').filter(Boolean);
+            const vendorCode = segments[0] === 'vendor' && segments[1] ? segments[1] : '';
+
+            try {
+                // Call logout API
+                await apiClient.post('/vendor/auth/logout');
+                console.log('✅ Logout API called successfully');
+            } catch (error) {
+                console.error('⚠️ Logout API error (continuing anyway):', error);
+            } finally {
+                // Clear vendor tokens only (not admin or customer tokens)
+                console.log('🧹 Clearing vendor tokens...');
+                localStorage.removeItem('vendor_token');
+                localStorage.removeItem('vendor_user');
+                localStorage.removeItem('currentUser');
+                localStorage.removeItem('vendorCode');
+                // Note: Do NOT use localStorage.clear() - it would clear admin/customer tokens too
+
+                console.log('🔄 Redirecting to login...');
+                window.location.href = `/vendor/${vendorCode}/login`;
+            }
+        },
+
         // Dark mode
         get dark() {
             return localStorage.getItem('dark') === 'true' ||