aboutsummaryrefslogtreecommitdiffstats
path: root/src/routes/login/undo
diff options
context:
space:
mode:
authorLibravatarLarge Libravatar memdmp <memdmpestrogenzone>2025-08-20 13:39:01 +0200
committerLibravatarLarge Libravatar memdmp <memdmpestrogenzone>2025-08-20 13:39:01 +0200
commitdddef149aea597a145e3717b2c461b251e0f6a8d (patch)
tree0a38a8d48e2db2501caca6d66358a4f88c1b743f /src/routes/login/undo
parent7fdaea73c5c67565202e19d6182fc215427919c3 (diff)
downloadcrunched-dddef149aea597a145e3717b2c461b251e0f6a8d.tar.gz
crunched-dddef149aea597a145e3717b2c461b251e0f6a8d.tar.bz2
crunched-dddef149aea597a145e3717b2c461b251e0f6a8d.tar.lz
crunched-dddef149aea597a145e3717b2c461b251e0f6a8d.zip

feat: oidc attempt 82845345

Diffstat (limited to 'src/routes/login/undo')
-rw-r--r--src/routes/login/undo/+server.ts16
1 files changed, 16 insertions, 0 deletions
diff --git a/src/routes/login/undo/+server.ts b/src/routes/login/undo/+server.ts
new file mode 100644
index 0000000..a3559d6
--- /dev/null
+++ b/src/routes/login/undo/+server.ts
@@ -0,0 +1,16 @@
+import * as auth from '$lib/auth.server.js';
+import { error, redirect } from '@sveltejs/kit';
+import * as client from 'openid-client';
+export const GET = async (event) => {
+ const token = event.cookies.get('oid__access_token');
+ if (!token) throw error(403, 'Logout requires an access token!');
+ await client.tokenRevocation(await auth.getConfig(), token);
+ let target =
+ event.url.searchParams.get('next') ?? event.cookies.get('next') ?? '/';
+ if (new URL(target, event.url.href).host !== event.url.host) target = '/';
+ event.cookies.delete('next', {
+ path: '/',
+ });
+ auth.unsetCookies(event.cookies);
+ throw redirect(303, `/login/callback/ok?next=${encodeURIComponent(target)}`);
+};