From dac231092bcb1ad5cd25bd66b759e426a5c62625 Mon Sep 17 00:00:00 2001 From: isaacclad Date: Wed, 10 Jun 2026 11:23:42 +0000 Subject: [PATCH] Per-app logout keeps platform SSO session (quick password-less re-entry). Local-only sign-out: end this app's session but leave the auth.ladill.com session intact, so the signed-out page's Sign in again re-auths silently via prompt=none. Full sign-out of all Ladill apps remains on account.ladill.com. Co-Authored-By: Claude Opus 4.8 --- app/Http/Controllers/Auth/SsoLoginController.php | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/app/Http/Controllers/Auth/SsoLoginController.php b/app/Http/Controllers/Auth/SsoLoginController.php index ea6b483..23ee491 100644 --- a/app/Http/Controllers/Auth/SsoLoginController.php +++ b/app/Http/Controllers/Auth/SsoLoginController.php @@ -135,9 +135,10 @@ class SsoLoginController extends Controller $request->session()->invalidate(); $request->session()->regenerateToken(); - return redirect()->route('sso.logout-bridge', [ - 'return' => $this->defaultSignedOutUrl(), - ]); + // Per-app sign-out: end only this app's session and keep the platform + // (auth.ladill.com) SSO session alive so "Sign in again" re-auths silently + // without a password. Full "sign out of all Ladill apps" lives on account. + return redirect()->away($this->defaultSignedOutUrl()); } public function logoutBridge(Request $request): View