Changeset 4120

Timestamp:

09/23/2016 05:40:45 PM (10 years ago)

Author:

ocean90

Message:

WordPress.org SSO: Add /logout path.

This path is used for non-WordPress systems like Trac. It displays an "Are You Sure" message to confirm the logout action.

See #2029.

Location:

sites/trunk

Files:

• common/includes/wporg-sso/wp-plugin.php (modified) (2 diffs)
• wordpress.org/public_html/wp-content/themes/pub/wporg-login/partials/logout.php (added)

sites/trunk/common/includes/wporg-sso/wp-plugin.php

@@ -48 +48 @@
                                 // Not in list of targeted domains, not interested, bail out
                                 return;
+                        }
+
+                        // Extend paths which are only available for logged in users.
+                        if ( is_user_logged_in() ) {
+                                $this->valid_sso_paths['logout'] = '/logout';
                         }
 
@@ -117 +122 @@
                                                         }
                                                 } else if ( is_user_logged_in() ) {
-                                                        // Otherwise, redirect to the login screen.
-                                                        $this->_redirect_to_profile();
+                                                        if ( preg_match( '!^' . $this->valid_sso_paths['logout'] . '/?$!', $_SERVER['REQUEST_URI'] ) ) {
+                                                                // No redirect, ask the user if they really want to log out.
+                                                                return;
+                                                        } else {
+                                                                // Otherwise, redirect to the login screen.
+                                                                $this->_redirect_to_profile();
+                                                        }
                                                 }
                                         } elseif ( is_user_logged_in() ) {