icingaweb2/application/views/scripts/authentication/logout.phtml

<!--
    This view provides a workaround to logout from an external authentication provider, in case external
    authentication was configured (the default is to handle authentications internally in Icingaweb2).

    The <a href="http://tools.ietf.org/html/rfc2617">Http Basic and Digest Authentication</a> is not
    designed to handle logout. When the user has provided valid credentials, the client is adviced to include these
    in every further request until the browser was closed. To allow logout and to allow the user to change the
    logged-in user this JavaScript provides a workaround to force a new authentication prompt in most browsers.
-->
<div class="content">
    <div class="alert alert-warning" id="logout-status">
        <b><?= $this->translate('Logging out...'); ?></b>
        <br>
        <?= $this->translate(
            'If this message does not disappear, it might be necessary to quit the'
            . ' current session manually by clearing the cache, or by closing the current'
            . ' browser session.'
        ); ?>
    </div>

    <div class="container">
        <a href="<?= $this->href('dashboard/index'); ?>"><?= $this->translate('Login'); ?></a>
    </div>
</div>
<script type="text/javascript">
    /*
     * When JavaScript is available, trigger an XmlHTTPRequest with the non-existing user 'logout' and abort it
     * before it is able to finish. This will cause the browser to show a new authentication prompt in the next
     * request.
     */
    document.addEventListener('DOMContentLoaded', function () {
        var msg = document.getElementById('logout-status');
        try {
            if (navigator.userAgent.toLowerCase().indexOf('msie') !== -1) {
                document.execCommand('ClearAuthenticationCache');
            } else {
                var xhttp = new XMLHttpRequest();
                xhttp.open('GET', 'arbitrary url', true, 'logout', 'logout');
                xhttp.send('');
                xhttp.abort();
            }
        } catch (e) {
        }
        msg.innerHTML = '<?= $this->translate('Logout successful!'); ?>';
        msg.className = 'alert alert-success';
    });
</script>