Changeset 4120 for sites/trunk/common/includes/wporg-sso/wp-plugin.php

Timestamp:

09/23/2016 05:40:45 PM (8 years ago)

Author:

ocean90

Message:

WordPress.org SSO: Add /logout path.

This path is used for non-WordPress systems like Trac. It displays an "Are You Sure" message to confirm the logout action.

See #2029.

File:

• sites/trunk/common/includes/wporg-sso/wp-plugin.php (modified) (2 diffs)

sites/trunk/common/includes/wporg-sso/wp-plugin.php

@@ -48 +48 @@
                 // Not in list of targeted domains, not interested, bail out
                 return;
+            }
+
+            // Extend paths which are only available for logged in users.
+            if ( is_user_logged_in() ) {
+                $this->valid_sso_paths['logout'] = '/logout';
             }
 
@@ -117 +122 @@
                             }
                         } else if ( is_user_logged_in() ) {
-                            // Otherwise, redirect to the login screen.
-                            $this->_redirect_to_profile();
+                            if ( preg_match( '!^' . $this->valid_sso_paths['logout'] . '/?$!', $_SERVER['REQUEST_URI'] ) ) {
+                                // No redirect, ask the user if they really want to log out.
+                                return;
+                            } else {
+                                // Otherwise, redirect to the login screen.
+                                $this->_redirect_to_profile();
+                            }
                         }
                     } elseif ( is_user_logged_in() ) {