Call end_session_endpoint in IDP provider when login out from Console (#2476)

Author: reivaj05

integration/login_test.go

@@ -116,8 +116,8 @@ func TestLogout(t *testing.T) {
 		log.Println("authentication token not found in cookies response")
 		return
 	}
-
-	request, err = http.NewRequest("POST", "http://localhost:9090/api/v1/logout", requestDataBody)
+	logoutRequest := bytes.NewReader([]byte("{}"))
+	request, err = http.NewRequest("POST", "http://localhost:9090/api/v1/logout", logoutRequest)
 	if err != nil {
 		log.Println(err)
 		return
@@ -126,7 +126,6 @@ func TestLogout(t *testing.T) {
 	request.Header.Add("Content-Type", "application/json")
 
 	response, err = client.Do(request)
-
 	assert.NotNil(response, "Logout response is nil")
 	assert.Nil(err, "Logout errored out")
 	assert.Equal(response.StatusCode, 200)

models/login_response.go

@@ -37,6 +37,7 @@ type ProviderConfig struct {
 	Userinfo                 bool
 	RedirectCallbackDynamic  bool
 	RedirectCallback         string
+	EndSessionEndpoint       string
 	RoleArn                  string // can be empty
 }
 

models/logout_request.go

@@ -110,6 +110,7 @@ type Provider struct {
 	IDPName string
 	// if enabled means that we need extrace access_token as well
 	UserInfo       bool
+	RefreshToken   string
 	oauth2Config   Configuration
 	provHTTPClient *http.Client
 }
@@ -319,6 +320,7 @@ func (client *Provider) VerifyIdentity(ctx context.Context, code, state, roleARN
 	getWebTokenExpiry := func() (*credentials.WebIdentityToken, error) {
 		customCtx := context.WithValue(ctx, oauth2.HTTPClient, client.provHTTPClient)
 		oauth2Token, err := client.oauth2Config.Exchange(customCtx, code)
+		client.RefreshToken = oauth2Token.RefreshToken
 		if err != nil {
 			return nil, err
 		}

pkg/auth/idp/oauth2/config.go

@@ -84,7 +84,9 @@ export const deleteCookie = (name: string) => {
 
 export const clearSession = () => {
   storage.removeItem("token");
+  storage.removeItem("auth-state");
   deleteCookie("token");
+  deleteCookie("idp-refresh-token");
 };
 
 // timeFromDate gets time string from date input

pkg/auth/idp/oauth2/provider.go

@@ -142,6 +142,9 @@ const LoginCallback = ({ classes }: ILoginCallBackProps) => {
               targetPath = `${localStorage.getItem("redirect-path")}`;
               localStorage.setItem("redirect-path", "");
             }
+            if (state) {
+              localStorage.setItem("auth-state", state);
+            }
             setLoading(false);
             navigate(targetPath);
           })

portal-ui/src/common/utils.ts

@@ -35,8 +35,9 @@ const LogoutPage = () => {
       dispatch(resetSession());
       navigate(`login`);
     };
+    const state = localStorage.getItem("auth-state");
     api
-      .invoke("POST", `/api/v1/logout`)
+      .invoke("POST", `/api/v1/logout`, { state })
       .then(() => {
         deleteSession();
       })