add button logout

.env.sample

@@ -68,6 +68,7 @@ ENCRYPT_SECRET=un_secret_avec_exactement_64_bit
 
 # Use OIDC auth instead of audioconf's magiclink auth
 #OIDC_PROVIDER_URL=
+#OIDC_PROVIDER_LOGOUT_URL=
 #OIDC_CLIENT_ID=
 #OIDC_CLIENT_SECRET=
 

config.js

@@ -109,6 +109,7 @@ config.STATS_EXTERNAL_DASHBOARD_URL = process.env.STATS_EXTERNAL_DASHBOARD_URL
 
 
 config.OIDC_PROVIDER_URL = process.env.OIDC_PROVIDER_URL
+config.OIDC_PROVIDER_LOGOUT_URL = process.env.OIDC_PROVIDER_LOGOUT_URL
 config.OIDC_CLIENT_ID = process.env.OIDC_CLIENT_ID
 config.OIDC_CLIENT_SECRET = process.env.OIDC_CLIENT_SECRET
 config.OIDC_ACR_VALUES = process.env.OIDC_ACR_VALUES

controllers/startAuthController.js → controllers/userController.js

@@ -18,3 +18,8 @@ module.exports.startAuth = async (req, res) => {
 
   res.redirect(authRequest.redirectUrl)
 }
+
+module.exports.logout = async(req, res) => {
+  console.log(req.session)
+  return res.redirect(`/`)
+}

index.js

@@ -13,7 +13,7 @@ const dashboardController = require("./controllers/dashboardController")
 const format = require("./lib/format")
 const createConfController = require("./controllers/createConfController")
 const landingController = require("./controllers/landingController")
-const startAuthController = require("./controllers/startAuthController")
+const userController = require("./controllers/userController")
 const statusController = require("./controllers/statusController")
 const stats = require("./lib/stats")
 const urls = require("./urls")
@@ -75,7 +75,8 @@ app.use(function(req, res, next){
 
 app.get(urls.landing, landingController.getLanding)
 
-app.post(urls.startAuth, startAuthController.startAuth)
+app.post(urls.startAuth, userController.startAuth)
+app.post(urls.logout, userController.logout)
 
 app.get(urls.validationEmailSent, (req, res) => {
   res.render("validationEmailSent", {
@@ -139,6 +140,8 @@ app.get(urls.faq, (req, res) => {
   })
 })
 
+app.get(urls.logout, userController.logout)
+
 app.get(urls.status, statusController.getStatus)
 
 app.use(Sentry.Handlers.errorHandler())

lib/oidcAuth.js

@@ -119,6 +119,8 @@ module.exports.finishAuth = async (req) => {
     return { error: "L'identification a échoué. Entrez votre adresse mail ci-dessous pour recommencer." }
   }
   const email = userinfo.email
+
+  req.session.id_token_hint = tokenSet.id_token
 
   return {
     email,

test/startAuthControllerTest.js

@@ -4,7 +4,7 @@ const oidcAuth = require("../lib/oidcAuth")
 const sinon = require("sinon")
 const urls = require("../urls")
 
-describe("startAuthController", function() {
+describe("userController", function() {
 
   describe("using oidcAuth", function() {
     let oidcClientStub

urls.js

@@ -14,4 +14,5 @@ module.exports = {
   participantAction: '/dashboard/:participantId/:action',
   dashboard: '/dashboard',
   status: '/api/status',
+  logout: '/api/logout'
 }

views/partials/header.ejs

@@ -59,6 +59,9 @@
                 <li>
                   <%- include('dark-mode-switch') -%>
                 </li>
+                <li class="fr-link fr-icon-logout-box-r-line fr-icon">
+                  <a href="<%= urls.logout %>">Se déconnecter</a>
+                </li>
               </ul>
             </div>
           </div>