BellevueCollege / wordpress-cas-client

A CAS client plugin for Wordpress sites, forked from http://wordpress.org/support/plugin/wpcas-w-ldap
GNU General Public License v2.0
11 stars 8 forks source link

7 - Service parameter is not provided to CAS server on logout #37

Open jonathanwindle-zz opened 11 years ago

jonathanwindle-zz commented 11 years ago

The Problem

Currently when selecting "Log Out" in WordPress the user is directed to the CAS logout page with a parameter of "url" being passed to the page.

Example Logout URL https://www.bellevuecollege.edu/cas/logout?url=https%3A%2F%2Fwww.bellevuecollege.edu

The intention of this parameter is for the CAS service to redirect the user to the url being passed as the value.

Unfortunately this is not standard functionality among all implementations of the CAS service. Ideally this would be a user configurable option.

The Solution

Step 1

To fix the "bug" part of this issue, by default no parameter should be passed to the logout page. Doing this puts us in compliance with the CAS protocol spec.

Because redirect on logout is a common request we should move on to Step 2 to fully complete this issue.

Step 2

Implement configuration to allow a user to not only specify the parameter but the URL the user is redirected to. Inteligent URL options might be appropriate such as "Home Page" or "User's Last Visited URL"