Fix auth namespace references and add controller routes

Namespace fixes:
- Replace alias Beacon.Auth with alias Beacon.LiveAdmin.Auth in:
  oidc_controller.ex, dev_login_controller.ex, require_auth.ex, require_role.ex

Route additions:
- GET /auth/:provider → OIDCController.authorize
- GET /auth/:provider/callback → OIDCController.callback
- POST /auth/dev/login → DevLoginController.login
- GET /auth/logout → OIDCController.logout

New logout action in OIDCController:
- Deletes session token from database
- Clears _beacon_session cookie
- Redirects to login page

Author: bcardarella

lib/beacon/live_admin/auth/dev_login_controller.ex

@@ -12,7 +12,7 @@ defmodule Beacon.LiveAdmin.Auth.DevLoginController do
 
   use Phoenix.Controller
 
-  alias Beacon.Auth
+  alias Beacon.LiveAdmin.Auth
   alias Beacon.LiveAdmin.Auth.Config, as: AuthConfig
 
   @doc """

lib/beacon/live_admin/auth/oidc_controller.ex

@@ -16,7 +16,7 @@ defmodule Beacon.LiveAdmin.Auth.OIDCController do
 
   use Phoenix.Controller
 
-  alias Beacon.Auth
+  alias Beacon.LiveAdmin.Auth
   alias Beacon.LiveAdmin.Auth.Config, as: AuthConfig
 
   @doc """
@@ -84,6 +84,25 @@ defmodule Beacon.LiveAdmin.Auth.OIDCController do
     |> redirect(to: "/admin/auth/login")
   end
 
+  @doc """
+  Logs out the user by deleting the session and clearing the cookie.
+  """
+  def logout(conn, _params) do
+    case conn.cookies["_beacon_session"] do
+      nil -> :ok
+      encoded_token ->
+        case Base.url_decode64(encoded_token) do
+          {:ok, token} -> Auth.delete_session(token)
+          _ -> :ok
+        end
+    end
+
+    conn
+    |> delete_resp_cookie("_beacon_session")
+    |> put_flash(:info, "Signed out successfully.")
+    |> redirect(to: "/admin/login")
+  end
+
   defp callback_url(conn, provider) do
     endpoint = Phoenix.Controller.endpoint_module(conn)
     endpoint.url() <> "/admin/auth/#{provider}/callback"

lib/beacon/live_admin/auth/plug/require_auth.ex

@@ -16,7 +16,7 @@ defmodule Beacon.LiveAdmin.Auth.Plug.RequireAuth do
 
   import Plug.Conn
 
-  alias Beacon.Auth
+  alias Beacon.LiveAdmin.Auth
 
   @impl true
   def init(opts), do: opts

lib/beacon/live_admin/auth/plug/require_role.ex

@@ -26,7 +26,7 @@ defmodule Beacon.LiveAdmin.Auth.Plug.RequireRole do
 
   import Plug.Conn
 
-  alias Beacon.Auth
+  alias Beacon.LiveAdmin.Auth
 
   @impl true
   def init(opts), do: opts

lib/beacon/live_admin/router.ex

@@ -100,9 +100,15 @@ defmodule Beacon.LiveAdmin.Router do
 
         {_instance_name, session_name, session_opts} = Beacon.LiveAdmin.Router.__options__(pages, opts)
 
-        import Phoenix.Router, only: [get: 4]
+        import Phoenix.Router, only: [get: 4, post: 4]
         import Phoenix.LiveView.Router, only: [live: 4, live_session: 3]
 
+        # Auth controller routes (OIDC + dev login + logout)
+        get "/auth/:provider", Beacon.LiveAdmin.Auth.OIDCController, :authorize
+        get "/auth/:provider/callback", Beacon.LiveAdmin.Auth.OIDCController, :callback
+        post "/auth/dev/login", Beacon.LiveAdmin.Auth.DevLoginController, :login
+        get "/auth/logout", Beacon.LiveAdmin.Auth.OIDCController, :logout
+
         # Login route — pre-auth, separate live_session with minimal layout
         live_session :beacon_live_admin_login,
           root_layout: {Beacon.LiveAdmin.Auth.LoginLayout, :render} do