fix: gracefully handle invalid logout challenges (#307)

ory · Dec 12, 2023 · caa7c9e · caa7c9e
1 parent 9ad2556
commit caa7c9e
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/routes/logout.ts b/src/routes/logout.ts
@@ -61,14 +61,14 @@ export const createSubmitLogoutRoute: RouteCreator =
       return oauth2
         .rejectOAuth2LogoutRequest({ logoutChallenge })
         .then(() => res.redirect("welcome"))
-        .catch(next)
+        .catch(() => res.redirect("welcome"))
     } else {
       logger.debug("User agreed to log out.")
       // The user agreed to log out, let's accept the logout request.
       return oauth2
         .acceptOAuth2LogoutRequest({ logoutChallenge })
         .then(({ data: body }) => res.redirect(body.redirect_to))
-        .catch(next)
+        .catch(() => res.redirect("welcome"))
     }
   }