OpenIDC / mod_auth_openidc

OpenID Certified™ OpenID Connect Relying Party implementation for Apache HTTP Server 2.x
Apache License 2.0
990 stars 327 forks source link

id_token_hint is missing on logout redirect #974

Closed kbejjipuram closed 1 year ago

kbejjipuram commented 1 year ago

We use below configuration to make sure the AuthN/AuthZ works for multiple Apache web server instances under load balancer. All works well but after adding this we are noticing the logout redirect is NOT adding id_token_hint anymore which is resulting in inconsistent behavior upon logout.

OIDCSessionType client-cookie

Could you please check and suggest if we need to add any additional OIDC property to Apache to get this id_token_hint to be added to logout URL.

Upon logout we just see this post_logout_redirect_uri is being added and we lost this id_token_hint !!!

github-actions[bot] commented 1 year ago

https://github.com/zmartzone/mod_auth_openidc/wiki#20-why-is-my-ticket-closed-as-invalid