fix: remove session on logout

2023-03-10 15:10:36 +01:00
1 changed files with 6 additions and 1 deletions
@@ -282,7 +282,12 @@ app.get('/userinfo', (req, res) => {
 })

 app.get('/v2/logout', (req, res) => {
-  res.redirect(`${req.query.returnTo}?domain=${issuer}`)
+  const code = req.cookies['auth0']
+  const session = sessions[code]
+  if (session) {
+    delete sessions[code]
+  }
+  res.redirect(req.query.returnTo)
 })

 app.get('/.well-known/jwks.json', (req, res) => {