lexton-it/NextWks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(auth): only clear NextWks cookie on logout, cant cross-domain

Browse source
This commit is contained in:
Claus Lohmar 2026-06-15 08:19:44 +00:00
parent d0dbe9b472
commit 594cf3efe2
1 changed files with 2 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
src/main.go
View file

@ -133,15 +133,12 @@ func main() {
HttpOnly: true, HttpOnly: true,
SameSite: http.SameSiteLaxMode, SameSite: http.SameSiteLaxMode,
}) })
// Clear both NextWks and Authelia session cookies // Clear NextWks session cookie
http.SetCookie(w, &http.Cookie{ http.SetCookie(w, &http.Cookie{
Name: "nextwks_session", Value: "", Path: "/", Domain: cfg.OIDC.Domain, Name: "nextwks_session", Value: "", Path: "/", Domain: cfg.OIDC.Domain,
MaxAge: -1, HttpOnly: true, SameSite: http.SameSiteLaxMode, MaxAge: -1, HttpOnly: true, SameSite: http.SameSiteLaxMode,
}) })
http.SetCookie(w, &http.Cookie{ // Redirect to workspace — no session means redirect to Authelia login
Name: "authelia_session", Value: "", Path: "/", Domain: domainFromURL(cfg.OIDC.IssuerURL),
MaxAge: -1, HttpOnly: true, SameSite: http.SameSiteLaxMode,
})
http.Redirect(w, r, "/", http.StatusFound) http.Redirect(w, r, "/", http.StatusFound)
}) })