Add DELETE route for session logout

config/routes.rb

@@ -68,6 +68,7 @@
       get '/bounced' => 'users/sp_handoff_bounced#bounced'
       post '/' => 'users/sessions#create', as: :user_session
       get '/logout' => 'users/sessions#destroy', as: :destroy_user_session
+      delete '/logout' => 'users/sessions#destroy'
       get '/active' => 'users/sessions#active'
       post '/sessions/keepalive' => 'users/sessions#keepalive'
 

spec/controllers/users/sessions_controller_spec.rb

@@ -129,6 +129,25 @@
       sign_in_as_user
 
       get :destroy
+      expect(controller.current_user).to be nil
+    end
+  end
+
+  describe 'DELETE /logout' do
+    it 'tracks a logout event' do
+      stub_analytics
+      expect(@analytics).to receive(:track_event).with(
+        'Logout Initiated',
+        hash_including(
+          sp_initiated: false,
+          oidc: false,
+        ),
+      )
+
+      sign_in_as_user
+
+      delete :destroy
+      expect(controller.current_user).to be nil
     end
   end