PhabricatorLogoutController.php
No OneTemporary
Actions

Subscribers

None

File Metadata

	<?php

	final class PhabricatorLogoutController
	extends PhabricatorAuthController {

	public function shouldRequireLogin() {
	return true;
	}

	public function shouldRequireEmailVerification() {
	// Allow unverified users to logout.
	return false;
	}

	public function shouldRequireEnabledUser() {
	// Allow disabled users to logout.
	return false;
	}

	public function shouldAllowPartialSessions() {
	return true;
	}

	public function shouldAllowLegallyNonCompliantUsers() {
	return true;
	}

	public function handleRequest(AphrontRequest $request) {
	$viewer = $this->getViewer();

	if ($request->isFormPost()) {
	// Destroy the user's session in the database so logout works even if
	// their cookies have some issues. We'll detect cookie issues when they
	// try to login again and tell them to clear any junk.
	$phsid = $request->getCookie(PhabricatorCookies::COOKIE_SESSION);
	if (strlen($phsid)) {
	$session = id(new PhabricatorAuthSessionQuery())
	->setViewer($viewer)
	->withSessionKeys(array($phsid))
	->executeOne();

	if ($session) {
	$engine = new PhabricatorAuthSessionEngine();
	$engine->logoutSession($viewer, $session);
	}
	}
	$request->clearCookie(PhabricatorCookies::COOKIE_SESSION);

	return id(new AphrontRedirectResponse())
	->setURI('/auth/loggedout/');
	}

	if ($viewer->getPHID()) {
	return $this->newDialog()
	->setTitle(pht('Log Out?'))
	->appendChild(pht('Are you sure you want to log out?'))
	->addSubmitButton(pht('Log Out'))
	->addCancelButton('/');
	}

	return id(new AphrontRedirectResponse())->setURI('/');
	}

	}