Method ServeHTTP

auth.go:422–455

(w http.ResponseWriter, r *http.Request)

}

func (h *LogoutHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
	var idToken string

	// Retrieve saved session.
	cookie, err := r.Cookie(authCookieName)
	if err != nil {
		echo(Log{"t": "logout_cookie", "error": "not found"})
		h.redirect(w, r, idToken)
		return
	}

	sessionID := cookie.Value
	session, ok := h.auth.get(sessionID)

	// Delete cookie.
	cookie.MaxAge = -1
	cookie.Secure = h.auth.secure
	http.SetCookie(w, cookie)

	// Purge session
	h.auth.remove(sessionID)

	if ok {
		// Reload all of this user's browser tabs
		h.broker.resetClients(session)

		// A token may not be present if the oauth2 workflow failed, so check before access.
		if session.token != nil {
			idToken, _ = session.token.Extra("id_token").(string) // raw id_token (required by Okta)
		}
	}

	h.redirect(w, r, idToken)
}

func (h *LogoutHandler) redirect(w http.ResponseWriter, r *http.Request, idToken string) {
	if h.auth.conf.EndSessionURL == "" {