Add logout link for the IdP SSO session (https://ssp.dev.openconext.local/logout.php)

pmeulen · pmeulen · commit 28e9a10a742e · 2025-05-28T14:33:31.000+02:00
diff --git a/docker/html/index.html b/docker/html/index.html
@@ -32,6 +32,7 @@ <h2 id="saml-metadata">SAML Metadata</h2>
     <h2 id="simplesamlphp">SimpleSAMLphp</h2>
     <ul>
         <li><a href="https://ssp.dev.openconext.local/simplesaml/admin">SimpleSAMLphp installation page (password: <code>secret</code>)</a></li>
+        <li><a href="logout.php">End IdP SSP session (remove SimpleSAMLAuthToken cookie)</a></li>
     </ul>
 
     <h2 id="test-accounts">Test accounts</h2>
diff --git a/docker/html/logout.php b/docker/html/logout.php
@@ -0,0 +1,32 @@
+<?php
+
+const SSP_AUTH_COOKIE_NAME = 'SimpleSAMLAuthToken';
+
+$cookie_was_set = false;
+
+// Check if cookie is set
+if (isset($_COOKIE[SSP_AUTH_COOKIE_NAME])) {
+    $cookie_was_set = true;
+    // Send cookie header to unset cookie
+    setcookie(SSP_AUTH_COOKIE_NAME, '', time() - 3600); // Expire cookie
+}
+
+$message = '';
+if ($cookie_was_set) {
+    $message = 'Deleted ' . SSP_AUTH_COOKIE_NAME . ' cookie.';
+} else {
+    $message = SSP_AUTH_COOKIE_NAME . ' was not present.';
+}
+
+$message = htmlspecialchars($message, ENT_QUOTES, 'UTF-8');
+
+echo <<<HTML
+<html lang="en">
+<body>
+    <p>$message</p>
+    <p>
+    <a href="/">Home</a>
+</p>
+</body>
+</html>
+HTML;
