Uploaded image for project: 'OpenId Connect'
  1. OpenId Connect
  2. OIDC-319

Add support for sending the RP-initiated logout request as POST instead of GET

    XMLWordPrintable

Details

    • New Feature
    • Resolution: Fixed
    • Major
    • 2.27.0
    • 2.26.0
    • Authenticator
    • None
    • Unit
    • Unknown

    Description

      Currently, the RP-initiated logout is done through a redirect (so a GET), but it would be interesting to also allow configuring the authenticator to send POST request instead (as allowed by the specification).

      In terms of implementation, it probably means redirecting to a dedicate XWiki endpoint which tend use javascript to send the POST request to the provider, instead of directly redirecting to the provider's logout endpoint.

      Attachments

        Activity

          People

            tmortagne Thomas Mortagne
            tmortagne Thomas Mortagne
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: