ExtensionEngine / tailor

Content authoring platform
MIT License
31 stars 10 forks source link

Feature flag OIDC logout via env #790

Closed kronicker closed 3 years ago

kronicker commented 3 years ago

This PR introduces a new environment variable OIDC_LOGOUT_ENABLED. If set to a truthy value it will reduce logout to be only local and disable silent auth. The motivation behind this is to enable using OIDC login with IdPs that do not support ODIC RP Initiate Logout protocol/spec (e.g. Google). The caveat of opting for this approach is obvious (no silent auth) so it is set to 1 in .env.example to act as a default example value.