From OpenID Connect RP-Initiated Logout 1.0:
_An id_token_hint carring an ID Token for the RP is also REQUIRED when requesting post-logout redirection; if it is not supplied with post_logout_redirecturi, the OP MUST NOT perform post-logout redirection.
For this reason BeforeRedirectToIdentityProviderAsync has been added.
Class SessionPrincipal is widely used in application.
Login with external idp works correctly. But logout doesn't work beacouse after assigning HttpContext.Current.User environment of OwinContext (source) has User with only claim (http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name) and in BeforeRedirectToIdentityProviderAsyncid_token was not found.
Why ClaimsIdentity in OwinContext has only one claim?
Is possible to save all claims after HttpContext.Current.User reassigning?
Hello! I have asp.net application.
From OpenID Connect RP-Initiated Logout 1.0: _An id_token_hint carring an ID Token for the RP is also REQUIRED when requesting post-logout redirection; if it is not supplied with post_logout_redirecturi, the OP MUST NOT perform post-logout redirection.
For this reason
BeforeRedirectToIdentityProviderAsync
has been added.Also I have method
Application_PostAuthenticateRequest
which is called on every requestClass
SessionPrincipal
is widely used in application.Login with external idp works correctly. But logout doesn't work beacouse after assigning
HttpContext.Current.User
environment ofOwinContext
(source) hasUser
with only claim (http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name) and inBeforeRedirectToIdentityProviderAsync
id_token
was not found.ClaimsIdentity
inOwinContext
has only one claim?HttpContext.Current.User
reassigning?JwtRegisteredClaimNames
?Thank you!