-
-
Notifications
You must be signed in to change notification settings - Fork 51
Ensure OIDC properly logs out #227
Copy link
Copy link
Open
Labels
bugSomething isn't workingSomething isn't workingenhancementNew feature or requestNew feature or requestneeds testing (on unstable)If the feature exists, but isnt yet releasedIf the feature exists, but isnt yet released
Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't workingenhancementNew feature or requestNew feature or requestneeds testing (on unstable)If the feature exists, but isnt yet releasedIf the feature exists, but isnt yet released
Currently, wag only ends its current session but not the session on the identity provider. This causes a very confusing loop for some users where hitting the logout button immediately redirects them to being logged in again.
This can be fixed in two ways:
o.provider.GetEndSessionEndpoint()URL to signout the session at the IDPFor 2. I just want to make sure we dont unauthorise a users IDP session, or are at least given the option to only end Wags session. Just so this doesnt become frustrating for people.
@muff10
@krage3x