diff --git a/src/main.go b/src/main.go index f2c1ff5..42b54e3 100644 --- a/src/main.go +++ b/src/main.go @@ -133,8 +133,9 @@ func main() { HttpOnly: true, SameSite: http.SameSiteLaxMode, }) - // Redirect to Authelia's logout page, then back to workspace - logoutURL := fmt.Sprintf("%s/logout?rd=%s", cfg.OIDC.IssuerURL, url.QueryEscape(cfg.OIDC.RedirectURL)) + // Clear NextWks session, force re-login via Authelia + logoutURL := fmt.Sprintf("%s/api/oidc/authorize?prompt=login&response_type=code&client_id=%s&redirect_uri=%s&scope=openid+profile+email&state=logout&nonce=logout", + cfg.OIDC.IssuerURL, url.QueryEscape(cfg.OIDC.ClientID), url.QueryEscape(cfg.OIDC.RedirectURL)) http.Redirect(w, r, logoutURL, http.StatusFound) })