goweb-oidc/internal/route/logout.go

package route

import (
	"net/http"

	oidc "forge.cadoles.com/wpetit/goweb-oidc"
	"forge.cadoles.com/wpetit/goweb-oidc/internal/config"
	"github.com/pkg/errors"
	"gitlab.com/wpetit/goweb/logger"
	"gitlab.com/wpetit/goweb/middleware/container"
	"gitlab.com/wpetit/goweb/service/session"
)

func handleLogout(w http.ResponseWriter, r *http.Request) {
	ctx := r.Context()
	ctn := container.Must(ctx)
	conf := config.Must(ctn)

	sess, err := session.Must(ctn).Get(w, r)
	if err != nil {
		panic(errors.Wrap(err, "could not retrieve session"))
	}

	if err := sess.Delete(w, r); err != nil {
		panic(errors.Wrap(err, "could not delete session"))
	}

	client := oidc.Must(ctn)

	logger.Info(
		ctx,
		"logging out user",
		logger.F("postLogoutURL", conf.OIDC.PostLogoutRedirectURL),
	)

	client.Logout(w, r, conf.OIDC.PostLogoutRedirectURL)
}