wonderwall/pkg/router/handler_logout.go

package router

import (
	"fmt"
	"net/http"
	"net/url"

	log "github.com/sirupsen/logrus"

	"github.com/nais/wonderwall/pkg/router/request"
)

// Logout triggers self-initiated for the current user
func (h *Handler) Logout(w http.ResponseWriter, r *http.Request) {
	u, err := url.Parse(h.Provider.GetOpenIDConfiguration().EndSessionEndpoint)
	if err != nil {
		h.InternalError(w, r, fmt.Errorf("logout: parsing end session endpoint: %w", err))
		return
	}

	var idToken string

	sessionData, err := h.getSessionFromCookie(w, r)
	if err == nil && sessionData != nil {
		idToken = sessionData.IDToken
		err = h.destroySession(w, r, h.localSessionID(sessionData.ExternalSessionID))
		if err != nil {
			h.InternalError(w, r, fmt.Errorf("logout: destroying session: %w", err))
			return
		}

		log.WithField("claims", sessionData.Claims).Infof("logout: successful logout")
	}

	h.deleteCookie(w, SessionCookieName, h.CookieOptions)

	if h.Config.Loginstatus.Enabled {
		h.Loginstatus.ClearCookie(w, h.CookieOptions)
	}

	v := u.Query()

	postLogoutURI := request.PostLogoutRedirectURI(r, h.Provider.GetClientConfiguration().GetPostLogoutRedirectURI())
	if len(postLogoutURI) > 0 {
		v.Add("post_logout_redirect_uri", postLogoutURI)
	}

	if len(idToken) > 0 {
		v.Add("id_token_hint", idToken)
	}

	u.RawQuery = v.Encode()

	http.Redirect(w, r, u.String(), http.StatusTemporaryRedirect)
}