From f31e62a532890e733c275a14187e10b4574cf82e Mon Sep 17 00:00:00 2001
From: James Cole <thegrumpydictator@gmail.com>
Date: Sat, 19 Mar 2016 16:21:50 +0100
Subject: [PATCH] This is a routine that will remove all two-factor related
 information from the session, when the user logs out. See issue #219

---
 app/Handlers/Events/UserEventListener.php | 32 +++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 app/Handlers/Events/UserEventListener.php

diff --git a/app/Handlers/Events/UserEventListener.php b/app/Handlers/Events/UserEventListener.php
new file mode 100644
index 0000000000..6bfdbb75bd
--- /dev/null
+++ b/app/Handlers/Events/UserEventListener.php
@@ -0,0 +1,32 @@
+<?php
+/**
+ * UserEventListener.php
+ * Copyright (C) 2016 Sander Dorigo
+ *
+ * This software may be modified and distributed under the terms
+ * of the MIT license.  See the LICENSE file for details.
+ */
+
+namespace FireflyIII\Handlers\Events;
+
+use Session;
+
+/**
+ * Class UserEventListener
+ *
+ * @package FireflyIII\Handlers\Events
+ */
+class UserEventListener
+{
+    /**
+     * Handle user logout events.
+     */
+    public function onUserLogout($event)
+    {
+        // dump stuff from the session:
+        Session::forget('twofactor-authenticated');
+        Session::forget('twofactor-authenticated-date');
+
+        return true;
+    }
+}
\ No newline at end of file