Revert Destroy session cookies on logout #2278 (#2436)

monkeyiq · web-flow · commit 259e07eece8c · 2025-05-14T08:29:37.000+10:00
This is a reversion of #2278 It has some issues with running SimpleSAMLphp as a bridge #2435
diff --git a/modules/saml/src/Controller/ServiceProvider.php b/modules/saml/src/Controller/ServiceProvider.php
@@ -586,9 +586,6 @@ public function singleLogoutService(string $sourceId): RunnableResponse
             $state = $this->authState::loadState($relayState, 'saml:slosent');
             $state['saml:sp:LogoutStatus'] = $message->getStatus();
 
-            // Destroy session cookies.
-            $this->session->updateSessionCookies(['expire' => true]);
-
             return new RunnableResponse([Auth\Source::class, 'completeLogout'], [&$state]);
         } elseif ($message instanceof LogoutRequest) {
             Logger::debug('module/saml2/sp/logout: Request from ' . $idpEntityId);
