Next major version 2 with PHP 8.1, Symfony 6, Tabler UI, 2FA ... (#2902)

src/Saml/SamlLogoutSubscriber.php

@@ -0,0 +1,48 @@
+<?php
+
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Saml;
+
+use OneLogin\Saml2\Error;
+use Symfony\Component\EventDispatcher\EventSubscriberInterface;
+use Symfony\Component\Security\Http\Event\LogoutEvent;
+
+final class SamlLogoutSubscriber implements EventSubscriberInterface
+{
+    public function __construct(private SamlAuthFactory $samlAuth)
+    {
+    }
+
+    public static function getSubscribedEvents(): array
+    {
+        return [
+            LogoutEvent::class => 'logout',
+        ];
+    }
+
+    public function logout(LogoutEvent $event)
+    {
+        $token = $event->getToken();
+
+        if (!$token instanceof SamlToken) {
+            return;
+        }
+
+        $samlAuth = $this->samlAuth->create();
+
+        try {
+            $samlAuth->processSLO();
+        } catch (Error $e) {
+            if (!empty($samlAuth->getSLOurl())) {
+                $sessionIndex = $token->hasAttribute('sessionIndex') ? $token->getAttribute('sessionIndex') : null;
+                $samlAuth->logout(null, [], $token->getUserIdentifier(), $sessionIndex);
+            }
+        }
+    }
+}