48 lines
2.1 KiB
PHTML
48 lines
2.1 KiB
PHTML
<!--
|
|
This view provides a workaround to logout from an external authentication provider, in case external
|
|
authentication was configured (the default is to handle authentications internally in Icingaweb2).
|
|
|
|
The <a href="http://tools.ietf.org/html/rfc2617">Http Basic and Digest Authentication</a> is not
|
|
designed to handle logout. When the user has provided valid credentials, the client is adviced to include these
|
|
in every further request until the browser was closed. To allow logout and to allow the user to change the
|
|
logged-in user this JavaScript provides a workaround to force a new authentication prompt in most browsers.
|
|
-->
|
|
<div class="content">
|
|
<div class="alert alert-warning" id="logout-status">
|
|
<b><?= $this->translate('Logging out...'); ?></b>
|
|
<br>
|
|
<?= $this->translate(
|
|
'If this message does not disappear, it might be necessary to quit the'
|
|
. ' current session manually by clearing the cache, or by closing the current'
|
|
. ' browser session.'
|
|
); ?>
|
|
</div>
|
|
|
|
<div class="container">
|
|
<a href="<?= $this->href('dashboard/index?renderLayout'); ?>"><?= $this->translate('Login'); ?></a>
|
|
</div>
|
|
</div>
|
|
<script type="text/javascript">
|
|
/*
|
|
* When JavaScript is available, trigger an XmlHTTPRequest with the non-existing user 'logout' and abort it
|
|
* before it is able to finish. This will cause the browser to show a new authentication prompt in the next
|
|
* request.
|
|
*/
|
|
document.addEventListener('DOMContentLoaded', function () {
|
|
var msg = document.getElementById('logout-status');
|
|
try {
|
|
if (navigator.userAgent.toLowerCase().indexOf('msie') !== -1) {
|
|
document.execCommand('ClearAuthenticationCache');
|
|
} else {
|
|
var xhttp = new XMLHttpRequest();
|
|
xhttp.open('GET', 'arbitrary url', true, 'logout', 'logout');
|
|
xhttp.send('');
|
|
xhttp.abort();
|
|
}
|
|
} catch (e) {
|
|
}
|
|
msg.innerHTML = '<?= $this->translate('Logout successful!'); ?>';
|
|
msg.className = 'alert alert-success';
|
|
});
|
|
</script>
|