lexton-it/NextWks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(auth): only clear NextWks cookie on logout, cant cross-domain

Browse source
This commit is contained in:
Claus Lohmar 2026-06-15 08:19:44 +00:00
parent d0dbe9b472
commit 594cf3efe2
1 changed files with 2 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
src/main.go
View file

@ -133,15 +133,12 @@ func main() {
HttpOnly: true,
SameSite: http.SameSiteLaxMode,
})
// Clear both NextWks and Authelia session cookies
// Clear NextWks session cookie
http.SetCookie(w, &http.Cookie{
Name: "nextwks_session", Value: "", Path: "/", Domain: cfg.OIDC.Domain,
MaxAge: -1, HttpOnly: true, SameSite: http.SameSiteLaxMode,
})
http.SetCookie(w, &http.Cookie{
Name: "authelia_session", Value: "", Path: "/", Domain: domainFromURL(cfg.OIDC.IssuerURL),
MaxAge: -1, HttpOnly: true, SameSite: http.SameSiteLaxMode,
})
// Redirect to workspace — no session means redirect to Authelia login
http.Redirect(w, r, "/", http.StatusFound)
})