From 4a0f41e8c210880fbd38b6826cb70a994c7e6910 Mon Sep 17 00:00:00 2001 From: Trong Huu Nguyen Date: Tue, 20 Sep 2022 10:06:42 +0200 Subject: [PATCH] fix(loginstatus): clear more cookies on logout --- pkg/loginstatus/loginstatus.go | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/pkg/loginstatus/loginstatus.go b/pkg/loginstatus/loginstatus.go index df7ca89..0e4eb6e 100644 --- a/pkg/loginstatus/loginstatus.go +++ b/pkg/loginstatus/loginstatus.go @@ -14,7 +14,8 @@ import ( ) const ( - SameSiteMode = http.SameSiteDefaultMode + SameSiteMode = http.SameSiteDefaultMode + LoginserviceCookieName = "selvbetjening-idtoken" ) func NewClient(config config.Loginstatus, httpClient *http.Client) *Loginstatus { @@ -95,6 +96,7 @@ func (c *Loginstatus) ClearCookie(w http.ResponseWriter, opts cookie.Options) { opts = c.CookieOptions(opts) cookie.Clear(w, cookieName, opts) + cookie.Clear(w, LoginserviceCookieName, opts.WithSameSite(http.SameSiteNoneMode)) } func (c *Loginstatus) CookieOptions(opts cookie.Options) cookie.Options {