feat: add signout method, it needs to be called programattically

adhocore · adhocore · commit b1783b4ca72c · 2021-10-15T14:05:57.000+07:00
diff --git a/goic.go b/goic.go
@@ -48,6 +48,9 @@ var (
 
 	// ErrTokenAccessKey is error for invalid access_token
 	ErrTokenAccessKey = errors.New("goic id_token: invalid access_token")
+
+	// ErrSignOutRedir is error for invalid post sign-out redirect uri
+	ErrSignOutRedir = errors.New("goic sign-out: post redirect uri is invalid")
 )
 
 var (
@@ -421,6 +424,44 @@ func (g *Goic) RefreshToken(tok *Token) (*Token, error) {
 	return t, err
 }
 
+// SignOut signs out the Token from OpenID Provider and then redirects to given URI
+// Redirect URI must be preconfigured in OpenID Provider already
+func (g *Goic) SignOut(tok *Token, redir string, res http.ResponseWriter, req *http.Request) error {
+	if redir != "" {
+		if _, err := url.Parse(redir); err != nil {
+			return ErrSignOutRedir
+		}
+	}
+
+	name := tok.Provider
+	if !g.Supports(name) {
+		return ErrProviderSupport
+	}
+
+	tk := tok.AccessToken
+	if tk == "" && tok.RefreshToken != "" {
+		tk = tok.RefreshToken
+	} else {
+		return ErrTokenAccessKey
+	}
+
+	p := g.providers[tok.Provider]
+	redirect, err := http.NewRequest("GET", p.wellKnown.SignOutURI, nil)
+	if err != nil {
+		return err
+	}
+
+	qry := redirect.URL.Query()
+	qry.Add("id_token_hint", tk)
+	if redir != "" {
+		qry.Add("post_logout_redirect_uri", redir)
+	}
+
+	redirect.URL.RawQuery = qry.Encode()
+	http.Redirect(res, req, redirect.URL.String(), http.StatusFound)
+	return nil
+}
+
 // logIf logs if verbose is set
 func (g *Goic) logIf(s string, v ...interface{}) {
 	if g.verbose {
diff --git a/provider.go b/provider.go
@@ -25,6 +25,8 @@ type WellKnown struct {
 	AuthURI     string   `json:"authorization_endpoint"`
 	TokenURI    string   `json:"token_endpoint"`
 	UserInfoURI string   `json:"userinfo_endpoint"`
+	SignOutURI  string   `json:"end_session_endpoint,omitempty"`
+	RevokeURI   string   `json:"revocation_endpoint,omitempty"`
 	AlgoSupport []string `json:"id_token_signing_alg_values_supported"`
 	jwks        struct {
 		Keys []struct {
