lexton-it/NextWks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(auth): logout via Authelia with redirect back to confirmation page

Browse source
This commit is contained in:
Claus Lohmar 2026-06-15 08:32:26 +00:00
parent 312aa388d4
commit 917dbb0844
1 changed files with 10 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
src/main.go
View file

@ -123,14 +123,20 @@ func main() {
mux.HandleFunc("GET /auth/callback", oidcHandler.Callback) mux.HandleFunc("GET /auth/callback", oidcHandler.Callback)
mux.HandleFunc("POST /auth/callback", oidcHandler.Callback) mux.HandleFunc("POST /auth/callback", oidcHandler.Callback)
mux.HandleFunc("GET /auth/logout", func(w http.ResponseWriter, r *http.Request) { mux.HandleFunc("GET /auth/logout", func(w http.ResponseWriter, r *http.Request) {
// Clear NextWks session cookie // Check if this is the return from Authelia logout (no NextWks cookie)
if _, err := r.Cookie("nextwks_session"); err != nil {
// Second visit: show logout confirmation page
component := ui.LogoutPage("", cfg.OIDC.RedirectURL)
component.Render(r.Context(), w)
return
}
// First visit: clear cookie and redirect to Authelia logout
http.SetCookie(w, &http.Cookie{ http.SetCookie(w, &http.Cookie{
Name: "nextwks_session", Value: "", Path: "/", Domain: cfg.OIDC.Domain, Name: "nextwks_session", Value: "", Path: "/", Domain: cfg.OIDC.Domain,
MaxAge: -1, HttpOnly: true, SameSite: http.SameSiteLaxMode, MaxAge: -1, HttpOnly: true, SameSite: http.SameSiteLaxMode,
}) })
authLogoutURL := fmt.Sprintf("%s/logout", cfg.OIDC.IssuerURL) logoutURL := fmt.Sprintf("%s/logout?rd=%s/auth/logout", cfg.OIDC.IssuerURL, cfg.OIDC.RedirectURL)
component := ui.LogoutPage(authLogoutURL, cfg.OIDC.RedirectURL) http.Redirect(w, r, logoutURL, http.StatusFound)
component.Render(r.Context(), w)
}) })
// --- Workspace launcher (public, but OIDC-protected) --- // --- Workspace launcher (public, but OIDC-protected) ---