Compare commits
4 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| c4d3bb4cdf | |||
| 65f102f18a | |||
| cdc80db214 | |||
| 4576b5aa2b |
@@ -46,19 +46,13 @@ public static class Api
|
||||
{
|
||||
OnRedirectToIdentityProvider = context =>
|
||||
{
|
||||
if (!string.IsNullOrEmpty(context.ProtocolMessage.RedirectUri) && context.ProtocolMessage.RedirectUri.StartsWith("http://", StringComparison.OrdinalIgnoreCase))
|
||||
{
|
||||
var uriBuilder = new UriBuilder(context.ProtocolMessage.RedirectUri)
|
||||
{
|
||||
Scheme = "https",
|
||||
Port = -1,
|
||||
};
|
||||
var fallbackUri = context.ProtocolMessage.RedirectUri;
|
||||
|
||||
context.ProtocolMessage.RedirectUri = uriBuilder.Uri.ToString();
|
||||
}
|
||||
if (fallbackUri.StartsWith("http://", StringComparison.OrdinalIgnoreCase))
|
||||
context.ProtocolMessage.RedirectUri = fallbackUri.Replace("http://", "https://", StringComparison.OrdinalIgnoreCase);
|
||||
|
||||
return Task.CompletedTask;
|
||||
},
|
||||
}
|
||||
};
|
||||
});
|
||||
|
||||
@@ -112,30 +106,14 @@ public static class Api
|
||||
|
||||
app.MapGet("/logout", async (HttpContext context, IHttpClientFactory httpClientFactory, IOptions<AuthentikSettings> settings) =>
|
||||
{
|
||||
var authOptions = settings.Value;
|
||||
var accessToken = await context.GetTokenAsync("access_token");
|
||||
|
||||
if (!string.IsNullOrEmpty(accessToken))
|
||||
{
|
||||
try
|
||||
{
|
||||
var client = httpClientFactory.CreateClient();
|
||||
|
||||
var requestContent = new FormUrlEncodedContent(new Dictionary<string, string>(StringComparer.Ordinal)
|
||||
{
|
||||
{ "token", accessToken },
|
||||
{ "client_id", authOptions.ClientId! },
|
||||
{ "client_secret", authOptions.ClientSecret! },
|
||||
});
|
||||
|
||||
await client.PostAsync(authOptions.RevokationEndpoint, requestContent, context.RequestAborted);
|
||||
}
|
||||
catch { }
|
||||
}
|
||||
|
||||
await context.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
|
||||
|
||||
return Results.Redirect($"{authOptions.Authority}end-session/");
|
||||
string currentBaseUrl = $"https://{context.Request.Host}{context.Request.PathBase}/";
|
||||
|
||||
await context.SignOutAsync(OpenIdConnectDefaults.AuthenticationScheme, new AuthenticationProperties
|
||||
{
|
||||
RedirectUri = currentBaseUrl
|
||||
});
|
||||
});
|
||||
|
||||
return app;
|
||||
|
||||
Reference in New Issue
Block a user