Use Front-Channel Logout from SSO

Author: alexandrerw

front/logout.php

@@ -43,10 +43,15 @@
 
 if (
     $CFG_GLPI["ssovariables_id"] > 0
-    && ((string) $CFG_GLPI['ssologout_url']) !== ''
+    && strlen($CFG_GLPI['ssologout_url']) > 0
+    && Session::isAuthenticated()
 ) {
-    Session::cleanOnLogout();
-    Html::redirect($CFG_GLPI["ssologout_url"]);
+    if (!$CFG_GLPI["useFrontChannelLogout"]) {
+        Session::cleanOnLogout();
+    }
+    if (!$CFG_GLPI["useFrontChannelLogout"] || !isset($_GET['frontChannelLogout'])) {
+        Html::redirect($CFG_GLPI["ssologout_url"]);
+    }
 }
 
 if (

locales/pt_BR.po

@@ -7960,6 +7960,10 @@ msgstr "Outra autenticação enviada na requisição HTTP"
 msgid "SSO logout url"
 msgstr "SSO URL de logout"
 
+#: templates/pages/setup/authentication/other_ext_setup.html.twig
+msgid "Use Front-Channel Logout from SSO"
+msgstr "Usar Front-Channel Logout pelo SSO"
+
 #: templates/pages/setup/authentication/other_ext_setup.html.twig
 msgid "Remove the domain of logins like login@domain"
 msgstr "Remover o domínio do logins na forma login@domínio"

templates/pages/setup/authentication/other_ext_setup.html.twig

@@ -88,6 +88,11 @@
                         config['existing_auth_server_field_clean_domain'],
                         __('Remove the domain of logins like login@domain')
                      ) }}
+                     {{ fields.dropdownYesNo(
+                        'useFrontChannelLogout',
+                        config['useFrontChannelLogout'],
+                        __('Use Front-Channel Logout from SSO')
+                     ) }}
                      {{ fields.textField('realname_ssofield', config['realname_ssofield'], __('Surname')) }}
                      {{ fields.textField('firstname_ssofield', config['firstname_ssofield'], __('First name')) }}
                      {{ fields.textField('comment_ssofield', config['comment_ssofield'], __('Comments')) }}