Support optional session invalidation on logout

fabpot · Jul 23, 2015 · 1a55ff8 · 1a55ff8
1 parent fcefc53
commit 1a55ff8
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/Silex/Provider/SecurityServiceProvider.php b/src/Silex/Provider/SecurityServiceProvider.php
@@ -510,7 +510,10 @@ public function register(Application $app)
                     isset($options['with_csrf']) && $options['with_csrf'] && isset($app['form.csrf_provider']) ? $app['form.csrf_provider'] : null
                 );
 
-                $listener->addHandler(new SessionLogoutHandler());
+                $invalidateSession = isset($options['invalidate_session']) ? $options['invalidate_session'] : true;
+                if (true === $invalidateSession) {
+                    $listener->addHandler(new SessionLogoutHandler());
+                }
 
                 return $listener;
             });