Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Logging out does not trigger a back-channel logout to OAuth service #1127

Open
kottkrig opened this issue Jun 24, 2020 · 0 comments
Open

Logging out does not trigger a back-channel logout to OAuth service #1127

kottkrig opened this issue Jun 24, 2020 · 0 comments

Comments

@kottkrig
Copy link
Contributor

Expected Behavior

When the user clicks a logout link, Publisher should trigger a Back-Channel Logout so that the user is also logged out from the OAuth provider.

Current Behavior

When the user clicks a logout link, Publisher remove the active user session so that the user is logged out locally from Publisher. However, the OAuth server can still have an active login session.

Possible Solution/Implementation

I'm not very familiar with Symfony but is there a hook or a callback that triggers when a user requests to log out? Maybe it's possible there to add an extra request to the OAuth server. I can have a look at this but I don't really know where to start or where to put the code.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant