medlogic
/
olivetin
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: #718 - Clear OAuth2 authentication cookie on logout

This commit is contained in:
jamesread 2025-11-30 11:19:36 +00:00
parent 09d933722e
commit 7425db53f6
1 changed files with 13 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
service/internal/api/api.go
View File

@ -363,15 +363,25 @@ func (api *oliveTinAPI) Logout(ctx ctx.Context, req *connect.Request[apiv1.Logou
response := connect.NewResponse(&apiv1.LogoutResponse{})
// Clear the authentication cookie by setting it to expire
cookie := &http.Cookie{
// Clear the local authentication cookie by setting it to expire
localCookie := &http.Cookie{
Name: "olivetin-sid-local",
Value: "",
MaxAge: -1, // This tells the browser to delete the cookie
HttpOnly: true,
Path: "/",
}
response.Header().Set("Set-Cookie", cookie.String())
response.Header().Set("Set-Cookie", localCookie.String())
// Clear the OAuth2 authentication cookie by setting it to expire
oauth2Cookie := &http.Cookie{
Name: "olivetin-sid-oauth",
Value: "",
MaxAge: -1, // This tells the browser to delete the cookie
HttpOnly: true,
Path: "/",
}
response.Header().Add("Set-Cookie", oauth2Cookie.String())
return response, nil
}