fix(auth): logout local session after auth0 logout

fixes #756.
openwhyd · Dec 29, 2023 · 6e7299d · 6e7299d
1 parent 21c0f23
commit 6e7299d
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/app/lib/auth0/features.js b/app/lib/auth0/features.js
@@ -34,6 +34,17 @@ exports.makeAuthFeatures = (env) => {
 
     getAuthenticatedUser(request) {
       const oidcUser = getAuthenticatedUser(request);
+      if (!oidcUser) {
+        // @ts-ignore // session should be provided by 'express-session'
+        request.session?.destroy(function (err) {
+          if (err) {
+            console.error(
+              '[getAuthenticatedUser] error from request.session.destroy()',
+              err,
+            );
+          }
+        });
+      }
       return oidcUser ? mapToOpenwhydUser(oidcUser) : null;
     },