fix: explicitly set status response header for front-channel logout

Co-Authored-By: Morten Lied Johansen <morten.lied.johansen@nav.no>
Co-Authored-By: Sindre Rødseth Hansen <sindre.rodseth.hansen@nav.no>

pkg/router/handler_frontchannellogout.go

@@ -28,4 +28,5 @@ func (h *Handler) FrontChannelLogout(w http.ResponseWriter, r *http.Request) {
 
 	// Unconditionally destroy all local references to the session.
 	h.deleteCookie(w, h.GetSessionCookieName())
+	w.WriteHeader(http.StatusOK)
 }

pkg/router/router_test.go

@@ -329,6 +329,8 @@ func TestHandler_FrontChannelLogout(t *testing.T) {
 	req, err = client.Get(frontchannelLogoutURL.String())
 	assert.NoError(t, err)
 	defer req.Body.Close()
+
+	assert.Equal(t, http.StatusOK, req.StatusCode)
 }
 
 func getCookieFromJar(name string, cookies []*http.Cookie) *http.Cookie {