symfony
diff --git a/‎src/Symfony/Component/Security/Http/EventListener/CookieClearingLogoutListener.php
Copy file name to clipboardExpand all lines: src/Symfony/Component/Security/Http/EventListener/CookieClearingLogoutListener.php
+1-1Lines changed: 1 addition & 1 deletion b/‎src/Symfony/Component/Security/Http/EventListener/CookieClearingLogoutListener.php
Copy file name to clipboardExpand all lines: src/Symfony/Component/Security/Http/EventListener/CookieClearingLogoutListener.php
+1-1Lines changed: 1 addition & 1 deletion
diff --git a/‎src/Symfony/Component/Security/Http/Tests/EventListener/CookieClearingLogoutListenerTest.php
Copy file name to clipboard
+56Lines changed: 56 additions & 0 deletions b/‎src/Symfony/Component/Security/Http/Tests/EventListener/CookieClearingLogoutListenerTest.php
Copy file name to clipboard
+56Lines changed: 56 additions & 0 deletions
@@ -40,7 +40,7 @@ public function onLogout(LogoutEvent $event): void
         }
 
         foreach ($this->cookies as $cookieName => $cookieData) {
-            $response->headers->clearCookie($cookieName, $cookieData['path'], $cookieData['domain']);
+            $response->headers->clearCookie($cookieName, $cookieData['path'], $cookieData['domain'], $cookieData['secure'] ?? false, true, $cookieData['samesite'] ?? null);
         }
     }
 
 
@@ -0,0 +1,56 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\Security\Http\Tests\EventListener;
+
+use PHPUnit\Framework\TestCase;
+use Symfony\Component\HttpFoundation\Cookie;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\HttpFoundation\ResponseHeaderBag;
+use Symfony\Component\Security\Http\Event\LogoutEvent;
+use Symfony\Component\Security\Http\EventListener\CookieClearingLogoutListener;
+
+class CookieClearingLogoutListenerTest extends TestCase
+{
+    public function testLogout()
+    {
+        $response = new Response();
+        $event = new LogoutEvent(new Request(), null);
+        $event->setResponse($response);
+
+        $listener = new CookieClearingLogoutListener(['foo' => ['path' => '/foo', 'domain' => 'foo.foo', 'secure' => true, 'samesite' => Cookie::SAMESITE_STRICT], 'foo2' => ['path' => null, 'domain' => null]]);
+
+        $cookies = $response->headers->getCookies();
+        $this->assertCount(0, $cookies);
+
+        $listener->onLogout($event);
+
+        $cookies = $response->headers->getCookies(ResponseHeaderBag::COOKIES_ARRAY);
+        $this->assertCount(2, $cookies);
+
+        $cookie = $cookies['foo.foo']['/foo']['foo'];
+        $this->assertEquals('foo', $cookie->getName());
+        $this->assertEquals('/foo', $cookie->getPath());
+        $this->assertEquals('foo.foo', $cookie->getDomain());
+        $this->assertEquals(Cookie::SAMESITE_STRICT, $cookie->getSameSite());
+        $this->assertTrue($cookie->isSecure());
+        $this->assertTrue($cookie->isCleared());
+
+        $cookie = $cookies['']['/']['foo2'];
+        $this->assertStringStartsWith('foo2', $cookie->getName());
+        $this->assertEquals('/', $cookie->getPath());
+        $this->assertNull($cookie->getDomain());
+        $this->assertNull($cookie->getSameSite());
+        $this->assertFalse($cookie->isSecure());
+        $this->assertTrue($cookie->isCleared());
+    }
+}
Original file line number	Diff line number	Diff line change
`@@ -40,7 +40,7 @@ public function onLogout(LogoutEvent $event): void`
`40`	`40`	`}`
`41`	`41`
`42`	`42`	`foreach ($this->cookies as $cookieName => $cookieData) {`
`43`		`- $response->headers->clearCookie($cookieName, $cookieData['path'], $cookieData['domain']);`
	`43`	`+ $response->headers->clearCookie($cookieName, $cookieData['path'], $cookieData['domain'], $cookieData['secure'] ?? false, true, $cookieData['samesite'] ?? null);`
`44`	`44`	`}`
`45`	`45`	`}`
`46`	`46`