element-hq / matrix-authentication-service

GNU Affero General Public License v3.0
10 stars 1 forks source link

Support receiving backchannel logout notifications #2090

Open matrixbot opened 1 week ago

matrixbot commented 1 week ago

This issue was originally created by @sandhose at https://github.com/matrix-org/matrix-authentication-service/issues/2090.

We should support getting backchannel logout notifications from upstream OIDC providers and log out the sessions when we get one. What happens exactly in terms of which session gets logged out is still TBD

matrixbot commented 1 week ago

This comment was originally posted by @hughns at https://github.com/matrix-org/matrix-authentication-service/issues/2090#issuecomment-1816124491.

Current Synapse capability is at https://matrix-org.github.io/synapse/latest/openid.html#oidc-back-channel-logout which is an opt-in feature.