🔒 Force Single Logout (#77)

Signed-off-by: Luke Tainton <luke@tainton.uk>
2020-08-13 18:01:58 +01:00
parent dcc82eb424
commit 01a726c95c
2 changed files with 3 additions and 2 deletions
--- a/app/public/actions/logout.php
+++ b/app/public/actions/logout.php
@@ -2,7 +2,7 @@
    $PAGE_NAME = "Logging out...";
    require_once __DIR__ . "/../../includes/prereqs.php";

+    $access_token = $_SESSION['access_token'];
    session_destroy();
-
-    header('Location: /');
+    $oidc->signOut($access_token, $_ENV['APP_URL']);
 ?>