search

IdentityModel / oidc-token-manager

Apache License 2.0
51 stars 36 forks source link

Question: TokenManager and redirectForLogout #9

Closed Condor2708 closed 9 years ago

Condor2708 commented 9 years ago

I have an SPA application using TokenManager library. I'm logged in into the application and I want to logout and show the Login Form again. If I call redirectForLogout() it is redirecting me to the IdentityServer logout page and then redirecting me again to my SPA application

Which is the best way I can manage this without doing too many redirects? Thanks

brockallen commented 9 years ago

You need to redirect to the OP if you want to logout of the token service. If you don't, then you don't have to do the redirect.

Condor2708 commented 9 years ago

There is any option to redirect to the OP and show the login page in only one instruction? It will be a good idea?

Thanks

brockallen commented 9 years ago

You can pass the OIDC prompt=login param to force re-authentication. Check the spec.

Condor2708 commented 9 years ago

Thanks Brock!!!