// -*- mode: java; c-basic-offset: 2; -*-
// Copyright 2009-2011 Google, All Rights reserved
// Copyright 2011-2016 MIT, All rights reserved
// Released under the Apache License, Version 2.0
// http://www.apache.org/licenses/LICENSE-2.0

package com.google.appinventor.server;

import com.google.appengine.api.users.UserServiceFactory;

import com.google.appinventor.server.flags.Flag;

import java.io.IOException;

import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

/**
 * Logout handler
 *
 * @author sharon@google.com (Sharon Perl)
 */
public class LogoutServlet extends OdeServlet {

  private static final Flag<Boolean> useGoogle = Flag.createFlag("auth.usegoogle", true);

  @Override
  public void doGet(HttpServletRequest req, HttpServletResponse res) throws IOException {
//    req.getSession().invalidate();
    Cookie cookie = new Cookie("AppInventor", null);
    cookie.setPath("/");
    cookie.setMaxAge(0);        // This should cause it to be tossed immediately
    res.addCookie(cookie);

    // The code below is how you logout of Google. We have commented it out
    // here because in LoginServlet.java we are now destroying the ACSID Cookie
    // which effectively logs you out from Google's point of view, without effecting
    // other Google Systems that the user might be using.

    // Note: The code below will logout you out of ALL Google services
    // (which can be pretty annoying
    if (useGoogle.get() == true) {
      res.sendRedirect(UserServiceFactory.getUserService().createLogoutURL("/"));
      res.setStatus(HttpServletResponse.SC_MOVED_PERMANENTLY);
    } else {
      res.sendRedirect("/");
    }
  }
}