feature: delete session method for atproto_client::com::atproto::server

crates/atproto-client/src/com_atproto_server.rs

···
 //! AT Protocol server authentication operations.
 //!
 //! Client functions for com.atproto.server XRPC methods including
-//! session creation and refresh with app password authentication.
+//! session creation, refresh, and deletion with app password authentication.
 //! - **`create_app_password()`**: Create a new app password for authenticated account
+//! - **`delete_session()`**: Delete the current authentication session
 //!
 //! ## Request/Response Types
 //!
···
 use atproto_identity::url::URLBuilder;
 use serde::{Deserialize, Serialize};
 
-use crate::client::post_json;
+use crate::{
+    client::{Auth, post_json},
+    errors::ClientError,
+};
 
 /// Request to create a new authentication session.
 #[cfg_attr(debug_assertions, derive(Debug))]
···
 
     serde_json::from_value(value).map_err(|err| err.into())
 }
+
+/// Deletes the current authentication session.
+///
+/// Terminates the authenticated session, invalidating the current access token.
+/// This operation requires app password authentication and will fail with
+/// other authentication methods.
+///
+/// # Arguments
+///
+/// * `http_client` - HTTP client for making requests
+/// * `auth` - Authentication method (must be AppPassword)
+/// * `base_url` - Base URL of the AT Protocol server
+///
+/// # Returns
+///
+/// Returns `Ok(())` on successful session deletion (HTTP 200 response)
+///
+/// # Errors
+///
+/// Returns `ClientError::InvalidAuthMethod` if authentication is not AppPassword,
+/// or other errors for HTTP request failures.
+pub async fn delete_session(
+    http_client: &reqwest::Client,
+    auth: &Auth,
+    base_url: &str,
+) -> Result<()> {
+    // Ensure we have AppPassword authentication
+    let app_auth = match auth {
+        Auth::AppPassword(app_auth) => app_auth,
+        _ => {
+            return Err(ClientError::InvalidAuthMethod {
+                method: "deleteSession requires AppPassword authentication".to_string(),
+            }
+            .into());
+        }
+    };
+
+    let mut url_builder = URLBuilder::new(base_url);
+    url_builder.path("/xrpc/com.atproto.server.deleteSession");
+    let url = url_builder.build();
+
+    // Create headers with the Bearer token
+    let mut headers = reqwest::header::HeaderMap::new();
+    headers.insert(
+        reqwest::header::AUTHORIZATION,
+        reqwest::header::HeaderValue::from_str(&format!("Bearer {}", app_auth.access_token))?,
+    );
+
+    // Send POST request with no body
+    let response = http_client
+        .post(&url)
+        .headers(headers)
+        .send()
+        .await
+        .map_err(|error| ClientError::HttpRequestFailed {
+            url: url.clone(),
+            error,
+        })?;
+
+    // Check for successful response (200 OK)
+    if response.status() == reqwest::StatusCode::OK {
+        Ok(())
+    } else {
+        Err(anyhow::anyhow!(
+            "deleteSession failed: expected 200 OK, got {}",
+            response.status()
+        ))
+    }
+}

crates/atproto-client/src/errors.rs

···
         /// The underlying streaming error
         error: reqwest::Error,
     },
+
+    /// Occurs when an invalid authentication method is used for an operation
+    #[error("error-atproto-client-http-4 Invalid authentication method: {method}")]
+    InvalidAuthMethod {
+        /// Description of the authentication requirement
+        method: String,
+    },
 }
 
 /// Error types that can occur during DPoP authentication operations.