pcmt/handlers/logout.go
surtur 01907c349f
All checks were successful
continuous-integration/drone/push Build is passing
fix: stop looking for the CSRF token logout GET
2023-08-15 18:35:49 +02:00

69 lines
1.4 KiB
Go

// Copyright 2023 wanderer <a_mirre at utb dot cz>
// SPDX-License-Identifier: AGPL-3.0-only
package handlers
import (
"net/http"
"github.com/labstack/echo-contrib/session"
"github.com/labstack/echo/v4"
)
func Logout() echo.HandlerFunc {
return func(c echo.Context) error {
addHeaders(c)
switch {
case c.Request().Method == "POST":
sess, _ := session.Get(setting.SessionCookieName(), c)
if sess != nil {
log.Infof("max-age before logout: %d", sess.Options.MaxAge)
sess.Options.MaxAge = -1
if username := sess.Values["username"]; username != nil {
sess.Values["username"] = ""
}
err := sess.Save(c.Request(), c.Response())
if err != nil {
c.Logger().Error("could not delete session cookie")
}
}
return c.Redirect(http.StatusMovedPermanently, "/logout")
case c.Request().Method == "GET":
sess, _ := session.Get(setting.SessionCookieName(), c)
if sess != nil {
if username := sess.Values["username"]; username != nil {
return c.Redirect(http.StatusSeeOther, "/home")
}
}
p := newPage()
p.Title = "Logout"
p.Current = "logout"
err := c.Render(
http.StatusOK,
"logout.tmpl",
p,
)
if err != nil {
c.Logger().Errorf("error: %q", err)
return renderErrorPage(
c,
http.StatusInternalServerError,
http.StatusText(http.StatusInternalServerError),
err.Error(),
)
}
}
return nil
}
}