fix(sdk): add cookie for updateLogoutFlow (#3284)

Closes ory/sdk#255
ory · May 24, 2023 · 95ed2b9 · 95ed2b9
1 parent 831fb19
commit 95ed2b9
Show file tree

Hide file tree

Showing 5 changed files with 39 additions and 0 deletions.
diff --git a/internal/client-go/api_frontend.go b/internal/client-go/api_frontend.go
diff --git a/internal/httpclient/api_frontend.go b/internal/httpclient/api_frontend.go
diff --git a/selfservice/flow/logout/handler.go b/selfservice/flow/logout/handler.go
@@ -248,6 +248,15 @@ type updateLogoutFlow struct {
 	//
 	// in: query
 	ReturnTo string `json:"return_to"`
+
+	// HTTP Cookies
+	//
+	// When using the SDK in a browser app, on the server side you must include the HTTP Cookie Header
+	// sent by the client to your server here. This ensures that CSRF and session cookies are respected.
+	//
+	// in: header
+	// name: Cookie
+	Cookies string `json:"Cookie"`
 }
 
 // swagger:route GET /self-service/logout frontend updateLogoutFlow

diff --git a/spec/api.json b/spec/api.json
@@ -5035,6 +5035,14 @@
             "schema": {
               "type": "string"
             }
+          },
+          {
+            "description": "HTTP Cookies\n\nWhen using the SDK in a browser app, on the server side you must include the HTTP Cookie Header\nsent by the client to your server here. This ensures that CSRF and session cookies are respected.",
+            "in": "header",
+            "name": "Cookie",
+            "schema": {
+              "type": "string"
+            }
           }
         ],
         "responses": {

diff --git a/spec/swagger.json b/spec/swagger.json
@@ -1673,6 +1673,12 @@
             "description": "The URL to return to after the logout was completed.",
             "name": "return_to",
             "in": "query"
+          },
+          {
+            "type": "string",
+            "description": "HTTP Cookies\n\nWhen using the SDK in a browser app, on the server side you must include the HTTP Cookie Header\nsent by the client to your server here. This ensures that CSRF and session cookies are respected.",
+            "name": "Cookie",
+            "in": "header"
           }
         ],
         "responses": {