search

InseeFr / Keycloak-FranceConnect

Extension Keycloak facilitant l'utilisation de FranceConnect
MIT License
87 stars 31 forks source link

Error when logging out #6

Closed micedre closed 5 years ago

micedre commented 5 years ago

There was a change in how FranceConnect redirect the user on the logout endpoint. It stopped sending the state parameter which contradicts the specs :

https://openid.net/specs/openid-connect-session-1_0.html#RPLogout

state : OPTIONAL. Opaque value used by the RP to maintain state between the logout request and the callback to the endpoint specified by the post_logout_redirect_uri query parameter. If included in the logout request, the OP passes this value back to the RP using the state query parameter when redirecting the User Agent back to the RP.

This cause keycloak to throw an unhandled exception (here : https://github.com/keycloak/keycloak/blob/01255da0f07640f63a346123179cf485aa9058e0/services/src/main/java/org/keycloak/broker/oidc/OIDCIdentityProvider.java#L105).

An issue was open with France Connect Support.