misuzu/public-legacy/auth/logout.php

25 lines
643 B
PHP
Raw Normal View History

2019-03-08 01:35:53 +01:00
<?php
namespace Misuzu;
use Misuzu\Auth\AuthTokenCookie;
if($msz->authInfo->isLoggedIn) {
if(!CSRF::validateRequest()) {
Template::render('auth.logout');
return;
}
$tokenInfo = $msz->authInfo->tokenInfo;
$msz->authCtx->sessions->deleteSessions(sessionTokens: $tokenInfo->sessionToken);
$tokenBuilder = $tokenInfo->toBuilder();
$tokenBuilder->removeUserId();
$tokenBuilder->removeSessionToken();
$tokenBuilder->removeImpersonatedUserId();
2019-03-08 01:35:53 +01:00
$tokenInfo = $tokenBuilder->toInfo();
AuthTokenCookie::apply($tokenPacker->pack($tokenInfo));
2019-03-08 01:35:53 +01:00
}
Tools::redirect($msz->urls->format('index'));;