<?php
// {{{ICINGA_LICENSE_CODE}}}
// -----------------------------------------------------------------------------
// This file is part of icinga-web.
//
// Copyright (c) 2009-2015 Icinga Developer Team.
// All rights reserved.
//
// icinga-web is free software: you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// icinga-web is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with icinga-web.  If not, see <http://www.gnu.org/licenses/>.
// -----------------------------------------------------------------------------
// {{{ICINGA_LICENSE_CODE}}}


class IcingaApiAuthentificationLogoutFilter extends AgaviFilter implements AgaviIActionFilter {
    /**
     * If authkey was used, do a logout after executing
     *
     * (non-PHPdoc)
     * @see AgaviIFilter::execute()
     */
    public function execute(AgaviFilterChain $filterChain, AgaviExecutionContainer $container) {
        $filterChain->execute($container);
        $flag = (bool)$container->getAttribute('flag', 'org.icinga.api.auth', false);
        $user = $container->getContext()->getUser();

        if ($flag === true && $user->isAuthenticated()) {
            $user->doLogout();
            @session_destroy(); // Remove session from database
        }
    }
}
