Refactored the custom logout

auth/oidc/auth.php

@@ -327,13 +327,6 @@ public function postlogout_hook($user) {
                         preg_match("/\/oauth2\/logout$/", $logouturl)) {
                         $logouturl .= '?post_logout_redirect_uri=' . urlencode($CFG->wwwroot);
                     }
-                    else{
-                        $tokenrec = $DB->get_record('auth_oidc_token', ['userid' => $user->id]);
-                        $idToken = $tokenrec->idtoken;
-
-                        $logouturl .= '?post_logout_redirect_uri=' . urlencode($CFG->wwwroot);
-                        $logouturl .= '&id_token_hint=' . $idToken;
-                    }  
                 }
 
                 redirect($logouturl);

local/telconfig/classes/observer.php

@@ -134,4 +134,33 @@ private static function is_course_self_enrollable(int $courseid): bool {
             'status' => ENROL_INSTANCE_ENABLED,
         ]);
     }
+
+    public static function on_user_loggedout(\core\event\user_loggedout $event) {
+        global $DB, $CFG, $USER;
+
+        $user = $event->get_record_snapshot('user', $event->objectid);
+
+        if ($user->auth !== 'oidc') {
+            return true; // Ignore non-OIDC users
+        }
+
+        // Load token
+        $tokenrec = $DB->get_record('auth_oidc_token', ['userid' => $user->id]);
+        if ($tokenrec && isset($tokenrec->idtoken)) {
+            $idtoken = $tokenrec->idtoken;
+
+            $logouturl = get_config('auth_oidc', 'logouturi');
+            if (!$logouturl) {
+                $logouturl = 'https://login.microsoftonline.com/organizations/oauth2/logout?post_logout_redirect_uri=' .
+                    urlencode($CFG->wwwroot);
+            }
+            // Append id_token_hint
+            $logouturl .= '&id_token_hint=' . $idtoken;
+
+            // Use redirect now (Moodle already logged out the session)
+            redirect($logouturl);            
+        }
+
+        return true;
+    }
 }

local/telconfig/db/events.php

@@ -49,4 +49,10 @@
         'priority'    => 9999,
         'internal'    => false,
     ],
+    [
+        'eventname'   => '\core\event\user_loggedout',
+        'callback'    => 'local_telconfig\observer::on_user_loggedout',        
+        'priority'    => 9999,
+        'internal'    => false,
+    ],
 ];