logout.go RawHistoryFolder

1package handler
2
3import (
4	"fmt"
5	"net/http"
6	"time"
7
8	"github.com/bnema/gordon/internal/db/queries"
9	"github.com/bnema/gordon/internal/server"
10	"github.com/gorilla/sessions"
11	"github.com/labstack/echo/v4"
12)
13
14func Logout(c echo.Context, a *server.App) error {
15	// Retrieve the session
16	sess, err := getSession(c)
17	if err != nil || sess == nil {
18		// if there is no session, redirect to the login page
19		return c.Redirect(http.StatusSeeOther, a.Config.Admin.Path+"/login")
20
21	}
22
23	// Invalidate the session in the database
24	if sess != nil {
25		err := queries.InvalidateDBSession(a, sess.Values["sessionID"].(string))
26		if err != nil {
27			return fmt.Errorf("failed to invalidate session: %w", err)
28		}
29	}
30
31	// Delete the session
32	sess.Options = &sessions.Options{
33		Path:     "/",
34		MaxAge:   -1,
35		HttpOnly: true,
36	}
37
38	err = sess.Save(c.Request(), c.Response())
39	if err != nil {
40		return fmt.Errorf("failed to save session: %w", err)
41	}
42
43	// Drop the cookie
44	cookie := new(http.Cookie)
45	cookie.Name = "session"
46	cookie.Value = ""
47	cookie.Expires = time.Now().Add(-1 * time.Hour)
48	c.SetCookie(cookie)
49
50	return c.Redirect(http.StatusSeeOther, a.Config.Admin.Path+"/login")
51}