adadsa

public/auth/callback/index.php

@@ -56,11 +56,12 @@ if ($state === '' || $expectedState === '' || !hash_equals($expectedState, $stat
                 $accountCheck = $accountGate->checkUsername($username);
 
                 if (!($accountCheck['allowed'] ?? false)) {
-                    $auth->logout();
                     $target = (string) ($accountCheck['state'] ?? '') === 'pending'
                         ? '/auth/pending/?username=' . urlencode($username)
                         : '/auth/inactive/?message=' . urlencode((string) ($accountCheck['message'] ?? 'Dieses Konto ist noch nicht freigeschaltet.'));
-                    header('Location: ' . $target, true, 302);
+                    $logoutUrl = $auth->logoutUrl($target, (string) ($tokenPayload['id_token'] ?? ''));
+                    $auth->logout();
+                    header('Location: ' . $logoutUrl, true, 302);
                     exit;
                 } else {
                     $auth->establishSession($tokenPayload, $userPayload);