forked from i-love-flamingo/flamingo
-
Notifications
You must be signed in to change notification settings - Fork 0
/
logout_controller.go
111 lines (92 loc) · 3.03 KB
/
logout_controller.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
package interfaces
import (
"context"
"net/url"
"flamingo.me/flamingo/core/auth/application"
"flamingo.me/flamingo/core/auth/domain"
"flamingo.me/flamingo/framework/flamingo"
"flamingo.me/flamingo/framework/web"
"flamingo.me/flamingo/framework/web/responder"
)
type (
LogoutControllerInterface interface {
Get(context.Context, *web.Request) web.Response
}
// LogoutController handles the logout
LogoutController struct {
responder.RedirectAware
logger flamingo.Logger
authManager *application.AuthManager
eventPublisher *application.EventPublisher
logoutRedirect LogoutRedirectAware
}
// DefaultLogoutRedirect helper
DefaultLogoutRedirect struct {
authManager *application.AuthManager
}
LogoutRedirectAware interface {
GetRedirectURL(context context.Context, u *url.URL) (string, error)
}
)
var _ LogoutRedirectAware = new(DefaultLogoutRedirect)
// Inject DefaultLogoutRedirect dependencies
func (d *DefaultLogoutRedirect) Inject(manager *application.AuthManager) {
d.authManager = manager
}
// GetRedirectURL builds default redirect URL for logout
func (d *DefaultLogoutRedirect) GetRedirectURL(c context.Context, u *url.URL) (string, error) {
query := url.Values{}
ru, _ := d.authManager.URL(c, "")
query.Set("redirect_uri", ru.String())
u.RawQuery = query.Encode()
return u.String(), nil
}
// Logout locally
func logout(r *web.Request) {
r.Session().Delete(application.KeyAuthstate)
r.Session().Delete(application.KeyToken)
r.Session().Delete(application.KeyRawIDToken)
r.Session().Delete(application.KeyTokenExtras)
// kill session
r.Session().G().Options.MaxAge = -1
}
// Inject LogoutController dependencies
func (l *LogoutController) Inject(
redirectAware responder.RedirectAware,
logger flamingo.Logger,
authManager *application.AuthManager,
eventPublisher *application.EventPublisher,
logoutRedirect LogoutRedirectAware,
) {
l.RedirectAware = redirectAware
l.logger = logger
l.authManager = authManager
l.eventPublisher = eventPublisher
l.logoutRedirect = logoutRedirect
}
// Get handler for logout
func (l *LogoutController) Get(c context.Context, request *web.Request) web.Response {
var claims struct {
EndSessionEndpoint string `json:"end_session_endpoint"`
}
ru, _ := l.authManager.URL(c, "")
l.authManager.OpenIDProvider().Claims(&claims)
endURL, parseError := url.Parse(claims.EndSessionEndpoint)
if parseError != nil {
logout(request)
l.logger.Error("Logout locally only. Could not parse end_session_endpoint claim to logout from IDP", parseError.Error())
return l.RedirectURL(ru.String())
}
redirectURL, redirectURLError := l.logoutRedirect.GetRedirectURL(c, endURL)
if redirectURLError != nil {
logout(request)
l.logger.Error("Logout locally only. Could not fetch redirect URL for IDP logout", redirectURLError.Error())
return l.RedirectURL(ru.String())
}
logout(request)
request.Session().AddFlash("successful logged out", "warning")
l.eventPublisher.PublishLogoutEvent(c, &domain.LogoutEvent{
Session: request.Session().G(),
})
return l.RedirectURL(redirectURL)
}