I have an express app. I am adding a middleware which redirects user to logout if token is invalid.

export async function validateAuthTokenMiddleware(
    req: Request,
    res: Response,
    next: NextFunction,
): Promise<NextFunction | void> {
    try {
        const { context } = req;
        await validateToken(context);
        next();
    } catch (err) {
        logoutAndRedirectUser(res);
    }
}

Code for logoutAndRedirectUser

const logoutUser = (res: Response) => {
    res.clearCookie('my_token')
    res.format({
        json: () =>
            res.status(401).json({
                errors: [
                    {
                        message: 'You must login to see this',
                        errorCode: '0001',
                    },
                ],
                extensions: {
                    location: location,
                },
            }),
        html: () => res.redirect(302, location),
        default: () => res.redirect(302, location),
    });
};

I am using this middleware in my route like so. All api request from client goes via this route:

router.use('/api', validateAuthTokenMiddleware, graphql);

However the redirect is not working as expected.

• I am expecting my browser to get redirect to my '/login' route/page after clearing cookie. Instead I see just 401 for my /api call and browser remains on same page. res.redirect(302, '/login') is not triggered.
• I have tried refactoring logoutUser to just send res.redirect(302, '/login') Instead of res.json. Still doesn't work.

Network snapshot as observed on browser: