module.exports = logout

var assert = require("assert")
var url = require("url")

function logout (uri, params, cb) {
  assert(typeof uri === "string", "must pass registry URI to logout")
  assert(params && typeof params === "object", "must pass params to logout")
  assert(typeof cb === "function", "must pass callback to star")

  var auth = params.auth
  assert(auth && typeof auth === "object", "must pass auth to logout")
  assert(typeof auth.token === "string", "can only log out for token auth")

  uri = url.resolve(uri, "-/user/token/" + auth.token)
  var options = {
    method: "DELETE",
    auth: auth
  }

  this.log.verbose("logout", "invalidating session token for user")
  this.request(uri, options, cb)
}