new system prototype

handlers/logout.php

@@ -0,0 +1,13 @@
+<?php
+
+if ($method !== 'DELETE' && $method !== 'POST') {
+    json_error('METHOD_NOT_ALLOWED', 'Method not allowed', 405);
+}
+
+$token = get_bearer_token();
+if (!$token) {
+    json_error('UNAUTHORIZED', 'Missing Bearer token', 401);
+}
+
+token_revoke($token);
+json_success(['loggedOut' => true]);