Use logoutRequest instead of logout

@dmitrizagidulin

@dmitrizagidulin What parameters should I call logoutRequest with? I currently just get /logout back; no OIDC parameters in there.

Excellent question. So, the logoutRequest docstring goes into detail on each parameter, but I'll summarize:

id_token_hint (required for our workflow) - this is the serialized ID Token from the session object. It serves to authenticate the user to the logout endpoint, etc.
post_logout_redirect_uri (optional but useful) - the url that the user gets redirected to after logout. Must be pre-registered btw (during the time of client dynamic registration).
state (highly optional, depends on the app) - Opaque value used by the RP to maintain state between the logout request and the callback to the endpoint specified by the post_logout_redirect_uri query parameter.

Do those make sense?

@dmitrizagidulin

@dmitrizagidulin But where do I get id_token_hint from?

It’s just the ‘id_token’ from session

Ok let me try that, thanks!

Logout using OIDC credentials instead of cookies.

Navigation Menu