lexton-it/NextWks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(auth): force re-login via prompt=login for proper logout

Browse source
This commit is contained in:
Claus Lohmar 2026-06-15 08:07:54 +00:00
parent bc7d546e64
commit 2489ac589e
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
src/main.go
View file

@ -133,8 +133,9 @@ func main() {
HttpOnly: true,
SameSite: http.SameSiteLaxMode,
})
// Redirect to Authelia's logout page, then back to workspace
logoutURL := fmt.Sprintf("%s/logout?rd=%s", cfg.OIDC.IssuerURL, url.QueryEscape(cfg.OIDC.RedirectURL))
// Clear NextWks session, force re-login via Authelia
logoutURL := fmt.Sprintf("%s/api/oidc/authorize?prompt=login&response_type=code&client_id=%s&redirect_uri=%s&scope=openid+profile+email&state=logout&nonce=logout",
cfg.OIDC.IssuerURL, url.QueryEscape(cfg.OIDC.ClientID), url.QueryEscape(cfg.OIDC.RedirectURL))
http.Redirect(w, r, logoutURL, http.StatusFound)
})