search

davido / gerrit-oauth-provider

OAuth2 authentication provider for Gerrit Code Review. Please upload changes for review to: https://gerrit-review.googlesource.com/#/admin/projects/plugins/oauth
Apache License 2.0
140 stars 84 forks source link

CAS - Single Log Out #130

Open piotrekfus91 opened 4 years ago

piotrekfus91 commented 4 years ago

Hi, as far as I understand, this plugin does not support CAS logout. Expected scenario:

  1. Logged user clicks the button marked as Sign Out.
  2. User is redirected to CAS logout page.
  3. CAS logs out user and sends logout request for all services (including Gerrit) - this request is sent using server-server channel.
  4. Specific Servlet Filter handles logout in Gerrit. Official filter you can check here: https://github.com/apereo/java-cas-client/tree/master/cas-client-core/src/main/java/org/jasig/cas/client/session Is it possible to achieve in your plugin?
elupus commented 1 year ago

Lacking this too with new support for Auth0. Should be generally supported by a OIDC compatible IdP.