Clear-Site-Data für Shopware 6

// src/Subscriber/SecurityHeaderSubscriber.php
namespace App\Subscriber;

use Symfony\Component\EventDispatcher\EventSubscriberInterface;
use Symfony\Component\HttpKernel\Event\ResponseEvent;
use Symfony\Component\HttpKernel\KernelEvents;

class SecurityHeaderSubscriber implements EventSubscriberInterface
{
    public static function getSubscribedEvents(): array
    {
        return [
            KernelEvents::RESPONSE => 'onResponse',
        ];
    }

    public function onResponse(ResponseEvent $event): void
    {
        $request = $event->getRequest();
        $response = $event->getResponse();
        $route = $request->attributes->get('_route');

        // NUR auf der Logout-Route!
        if ($route === 'frontend.account.logout') {
            $response->headers->set(
                'Clear-Site-Data',
                '"cache", "cookies", "storage"'
            );
            // Logout darf nie gecacht werden
            $response->headers->set(
                'Cache-Control',
                'no-store, no-cache, must-revalidate, private'
            );
        }
    }
}

# Nginx — Alternative (nur für Logout-URL)
# Vorteil: funktioniert auch bei Shopware Cloud

location = /account/logout {
    # Clear-Site-Data nur auf Logout
    add_header Clear-Site-Data '"cache", "cookies", "storage"' always;

    # Logout-Response darf nie gecacht werden
    add_header Cache-Control "no-store, no-cache, must-revalidate, private" always;

    # Weiterleitung an Shopware
    proxy_pass http://127.0.0.1:8000;
    # ... weitere Proxy-Konfiguration
}