From 779d78cdc65700649e8672ff79dc02141f75a09c Mon Sep 17 00:00:00 2001
From: Joakim Olsson <joakim@unbound.se>
Date: Fri, 10 Mar 2023 15:10:36 +0100
Subject: [PATCH] fix: remove session on logout

---
 app.js | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/app.js b/app.js
index faf1aa6..71c7c01 100644
--- a/app.js
+++ b/app.js
@@ -282,7 +282,12 @@ app.get('/userinfo', (req, res) => {
 })
 
 app.get('/v2/logout', (req, res) => {
-  res.redirect(`${req.query.returnTo}?domain=${issuer}`)
+  const code = req.cookies['auth0']
+  const session = sessions[code]
+  if (session) {
+    delete sessions[code]
+  }
+  res.redirect(req.query.returnTo)
 })
 
 app.get('/.well-known/jwks.json', (req, res) => {