package ru.ulstu.fc.user.service; import jakarta.servlet.ServletException; import jakarta.servlet.http.HttpServletRequest; import jakarta.servlet.http.HttpServletResponse; import jakarta.servlet.http.HttpSession; import org.slf4j.Logger; import org.slf4j.LoggerFactory; import org.springframework.security.core.Authentication; import org.springframework.security.web.authentication.logout.SimpleUrlLogoutSuccessHandler; import org.springframework.stereotype.Component; import ru.ulstu.fc.config.Constants; import java.io.IOException; @Component public class UserSessionLogoutHandler extends SimpleUrlLogoutSuccessHandler { private final Logger log = LoggerFactory.getLogger(UserSessionLogoutHandler.class); private final UserSessionService userSessionService; public UserSessionLogoutHandler(UserSessionService userSessionService) { this.userSessionService = userSessionService; setDefaultTargetUrl(Constants.LOGOUT_URL); } @Override public void onLogoutSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IOException, ServletException { if (authentication == null) { super.onLogoutSuccess(request, response, authentication); return; } final String login = authentication.getName(); final String ipAddress = IpAddressResolver.getRemoteAddr(request); final String host = request.getRemoteHost(); log.debug("Logout Success for {}@{} ({})", login, ipAddress, host); HttpSession session = request.getSession(false); if (session != null) { final String sessionId = session.getAttribute(Constants.SESSION_ID_ATTR).toString(); userSessionService.closeUserSession(sessionId); session.removeAttribute(Constants.SESSION_ID_ATTR); session.invalidate(); } super.onLogoutSuccess(request, response, authentication); } }