Method HandleLogout

pkg/web/oauthclient/logout.go:96–129

HandleLogout invalidates the user's authorization, removes the auth cookie and may provide a URL to logout of the OAuth provider as well.

(w http.ResponseWriter, r *http.Request)

// HandleLogout invalidates the user's authorization, removes the auth
// cookie and may provide a URL to logout of the OAuth provider as well.
func (oc *OAuthClient) HandleLogout(w http.ResponseWriter, r *http.Request) {
	value, err := oc.getAuthCookie(w, r)
	if err != nil {
		webhandlers.Error(w, r, err)
		return
	}
	oc.removeAuthCookie(w, r)

	token, err := oc.Token(r.Context(), &oauth2.Token{
		AccessToken:  value.AccessToken,
		RefreshToken: value.RefreshToken,
		Expiry:       time.Now(),
	})
	if err != nil {
		webhandlers.Error(w, r, err)
		return
	}

	logoutURL, err := oc.Logout(r.Context(), token)
	if err != nil {
		webhandlers.Error(w, r, err)
		return
	}

	if logoutURL != "" {
		webhandlers.JSON(w, r, struct {
			OpLogoutURI string `json:"op_logout_uri"`
		}{
			OpLogoutURI: logoutURL,
		})
	} else {
		w.WriteHeader(http.StatusNoContent)
	}
}