add delete token request to logout

[bcotrim]

Related issues

• Fixes STU-488

Proposed Changes

• Add revoke token call during logout

Testing Instructions

• check 187112-ghe-Automattic/wpcom
• Run Studio and log in to WordPress.com
• Cut your internet connection
• Confirm logout button is disabled
• Restore your internet connection
• Confirm logout button is enabled
• Logout and confirm the request was made to revoke the token
• Using the token from Studio, try to make a request to WordPress.com API (you can just copy/paste the auth info from appdata from before you logged out)

Pre-merge Checklist

• Have you checked for TypeScript, React or other console errors?

[sejas]

I sandboxed the API and tried logging out. I confirm the token is revoked and it works as expected:

wpcom-logout-deauth-token.mp4

[sejas]

ha! it seems the wpcom req.delete sends the POST method instead. In theory if you pass the method as param it should override it, but I couldn't make it work. See the code.

An alternative if we want to avoid passing the bearer token is using client.request instead which I tried it and it works. Something like:

					client?.request(
						{
							apiNamespace: 'wpcom/v2',
							method: 'DELETE',
							path: '/studio-app/token',
						},
						( err, response ) => {
							if ( err ) {
								console.error( 'Failed to revoke token:', err );
							}
							console.log( 'Token revoked:', response );
						}
					);

[bcotrim]

I also couldn't overwrite the method.
But using client.request is a great approach, thanks @sejas