feat: delete refresh cookie when logout.

aborn · May 26, 2023 · 2ee487b · 2ee487b
1 parent 5399a38
commit 2ee487b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -70,6 +70,7 @@ export default defineNuxtConfig({
       debug: false, // optional, default is false
       response_type: 'id_token', // or 'code'
       secret: 'oidc._sessionid',
+      isCookieUserInfo: false,
       cookie: { loginName: '' },
       cookiePrefix: 'oidc._',
       cookieEncrypt: true,

diff --git a/src/runtime/server/routes/oidc/logout.ts b/src/runtime/server/routes/oidc/logout.ts
@@ -9,6 +9,7 @@ export default defineEventHandler((event) => {
   const { config } = useRuntimeConfig().openidConnect
   deleteCookie(event, config.secret)
   deleteCookie(event, config.cookiePrefix + 'access_token')
+  deleteCookie(event, config.cookiePrefix + 'refresh_token')
   deleteCookie(event, config.cookiePrefix + 'user_info')
 
   // delete part of cookie userinfo (depends on user's setting.).