scandic/web
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: add new endpoint for logout from current web

Browse Source
This commit is contained in:
Matilda Landström
2024-05-21 12:02:23 +02:00
parent 3ba78986da
commit af1d65f4bb
3 changed files with 30 additions and 77 deletions
Download Patch File Download Diff File Expand all files Collapse all files

86
app/[lang]/(live)/(protected)/logout/route.ts
View File

@@ -3,42 +3,33 @@ import { headers as nextHeaders } from "next/headers"
import { NextRequest, NextResponse } from "next/server"
import { AuthError } from "next-auth"
import { Lang } from "@/constants/languages"
import { env } from "@/env/server"
import { serverClient } from "@/lib/trpc/server"
import { badRequest } from "@/server/errors/next"
import { internalServerError } from "@/server/errors/next"
import { signOut } from "@/auth"
export async function GET(
request: NextRequest,
context: { params: { lang: Lang } }
) {
export async function GET(request: NextRequest) {
let redirectHeaders: Headers | undefined = undefined
let redirectTo: string
const returnUrl = request.headers.get("x-returnurl")
if (returnUrl) {
// Seamless logout request from Current web
// Should check for ?currentweb in header?
redirectTo = returnUrl
} else {
// Normal logout request from New web
redirectTo =
request.cookies.get("redirectTo")?.value || // Cookie gets set by authRequired middleware
request.headers.get("x-redirect-to") ||
request.nextUrl.searchParams.get("redirectTo") ||
request.headers.get("Referer") ||
"/"
console.log(redirectTo)
// If above fails, always redirect to startpage
if (!redirectTo) {
const proto = request.headers.get("x-forwarded-proto") ?? "http"
const host =
request.headers.get("x-forwarded-host") ??
request.headers.get("host") ??
env.URL
redirectTo = `${proto}://${host}/`
console.log({ logout_fallback: redirectTo })
if (redirectTo.startsWith("/")) {
if (!env.PUBLIC_URL) {
throw internalServerError("No value for env.PUBLIC_URL")
}
redirectTo = new URL(redirectTo, env.PUBLIC_URL).href
}
// Clean up cookie from authRequired middleware
redirectHeaders = new Headers()
@@ -46,55 +37,32 @@ export async function GET(
"set-cookie",
"redirectTo=; Expires=Thu, 01 Jan 1970 00:00:00 UTC; Path=/; HttpOnly; SameSite=Lax"
)
}
try {
// Initiate the seamless logout flow
const invalidateResponse = await serverClient().user.invalidateSessions()
try {
// Initiate the seamless logout flow
const invalidateResponse = await serverClient().user.invalidateSessions()
let redirectUrlValue
switch (context.params.lang) {
case Lang.da:
redirectUrlValue = env.SEAMLESS_LOGOUT_DA
break
case Lang.de:
redirectUrlValue = env.SEAMLESS_LOGOUT_DE
break
case Lang.en:
redirectUrlValue = env.SEAMLESS_LOGOUT_EN
break
case Lang.fi:
redirectUrlValue = env.SEAMLESS_LOGOUT_FI
break
case Lang.no:
redirectUrlValue = env.SEAMLESS_LOGOUT_NO
break
case Lang.sv:
redirectUrlValue = env.SEAMLESS_LOGOUT_SV
break
const redirectUrl = new URL(env.SEAMLESS_LOGOUT)
redirectUrl.searchParams.set("returnurl", redirectTo)
redirectTo = redirectUrl.toString()
} catch (e) {
console.error(
"Unable to create URL for seamless logout, proceeding without it."
)
console.error(e)
}
console.log(redirectUrlValue)
const redirectUrl = new URL(redirectUrlValue)
redirectUrl.searchParams.set("returnurl", redirectTo)
redirectTo = redirectUrl.toString()
console.log(redirectUrl, redirectTo)
} catch (e) {
console.error(
"Unable to create URL for seamless logout, proceeding without it."
)
console.error(e)
}
try {
console.log({ logout_AUTH_URL: process.env.AUTH_URL })
console.log({ logout_NEXTAUTH_URL: process.env.NEXTAUTH_URL })
console.log({ logout_env: process.env })
/**
* Passing `redirect: false` to `signOut` will return a result object
* instead of automatically redirecting inside of `signOut`.
* https://github.com/nextauthjs/next-auth/blob/3c035ec/packages/next-auth/src/lib/actions.ts#L104
*/
console.log({ logout_NEXTAUTH_URL: process.env.NEXTAUTH_URL })
console.log({ logout_env: process.env })
console.log({ logout_redirectTo: redirectTo })
const headers = new Headers(nextHeaders())
const signOutURL = createActionURL(
"signout",
@@ -110,7 +78,7 @@ export async function GET(
redirectTo,
redirect: false,
})
console.log(redirectUrlObj)
if (redirectUrlObj) {
return NextResponse.redirect(redirectUrlObj.redirect, {
headers: redirectHeaders,
@@ -124,5 +92,5 @@ export async function GET(
}
}
return badRequest()
return internalServerError()
}