fuzzy-controller/src/main/java/ru/ulstu/fc/user/service/UserSessionLogoutHandler.java

package ru.ulstu.fc.user.service;

import jakarta.servlet.ServletException;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;
import jakarta.servlet.http.HttpSession;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.security.core.Authentication;
import org.springframework.security.web.authentication.logout.SimpleUrlLogoutSuccessHandler;
import org.springframework.stereotype.Component;
import ru.ulstu.fc.config.Constants;

import java.io.IOException;

@Component
public class UserSessionLogoutHandler extends SimpleUrlLogoutSuccessHandler {
    private final Logger log = LoggerFactory.getLogger(UserSessionLogoutHandler.class);
    private final UserSessionService userSessionService;

    public UserSessionLogoutHandler(UserSessionService userSessionService) {
        this.userSessionService = userSessionService;
        setDefaultTargetUrl(Constants.LOGOUT_URL);
    }

    @Override
    public void onLogoutSuccess(HttpServletRequest request,
                                HttpServletResponse response,
                                Authentication authentication) throws IOException, ServletException {
        if (authentication == null) {
            super.onLogoutSuccess(request, response, authentication);
            return;
        }
        final String login = authentication.getName();
        final String ipAddress = IpAddressResolver.getRemoteAddr(request);
        final String host = request.getRemoteHost();
        log.debug("Logout Success for {}@{} ({})", login, ipAddress, host);
        HttpSession session = request.getSession(false);
        if (session != null) {
            final String sessionId = session.getAttribute(Constants.SESSION_ID_ATTR).toString();
            userSessionService.closeUserSession(sessionId);
            session.removeAttribute(Constants.SESSION_ID_ATTR);
            session.invalidate();
        }
        super.onLogoutSuccess(request, response, authentication);
    }
}