LP#1248636: Clear session at OPAC logout

When the user explicitly logs out, clear the session on the server side.

Signed-off-by: Mike Rylander <mrylander@gmail.com>
Signed-off-by: Galen Charlton <gmc@esilibrary.com>
Signed-off-by: Ben Shum <bshum@biblio.org>

diff --git a/Open-ILS/src/perlmods/lib/OpenILS/WWW/EGCatLoader.pm b/Open-ILS/src/perlmods/lib/OpenILS/WWW/EGCatLoader.pm
index e0ddf75..f9afad4 100644 (file)
--- a/Open-ILS/src/perlmods/lib/OpenILS/WWW/EGCatLoader.pm
+++ b/Open-ILS/src/perlmods/lib/OpenILS/WWW/EGCatLoader.pm
@@ -459,6 +459,12 @@ sub load_logout {
     # while logged in, go ahead and clear it out.
     $self->clear_anon_cache;
 
+    $U->simplereq(
+        'open-ils.auth',
+        'open-ils.auth.session.delete',
+        $self->cgi->cookie(COOKIE_SES)
+    );
+
     return $self->generic_redirect(
         $redirect_to || $self->ctx->{home_page},
         [