Centralize logout method; delete OIDC sessions on logout

2020-08-23 14:42:00 -05:00
parent d9c76e8dde
commit ff5ed6b39a
5 changed files with 34 additions and 8 deletions
--- a/app/controllers/api/v1/Password.controller.js
+++ b/app/controllers/api/v1/Password.controller.js
@@ -91,8 +91,7 @@ class PasswordController extends Controller {
        if ( req.trap.has_trap() && req.trap.get_trap() === 'password_reset' ) await req.trap.end()

        // invalidate existing tokens and other logins
-        const flitter = await this.auth.get_provider('flitter')
-        await flitter.logout(req)
+        await req.user.logout(req)
        await req.user.kickout()
        req.trust.unassume()
        return res.api()