@@ -300,7 +300,15 @@ func (p *OAuthProxy) SetCSRFCookie(rw http.ResponseWriter, req *http.Request, va
300300}
301301
302302func (p *OAuthProxy) ClearSessionCookie(rw http.ResponseWriter, req *http.Request) {
303− http.SetCookie(rw, p.MakeSessionCookie(req, "", time.Hour*-1, time.Now()))
303+ clr := p.MakeSessionCookie(req, "", time.Hour*-1, time.Now())
304+ http.SetCookie(rw, clr)
305+
306+ // ugly hack because default domain changed
307+ if p.CookieDomain == "" {
308+ clr2 := *clr
309+ clr2.Domain = req.Host
310+ http.SetCookie(rw, &clr2)
311+ }
304312}
305313
306314func (p *OAuthProxy) SetSessionCookie(rw http.ResponseWriter, req *http.Request, val string) {