search

emissary-ingress / emissary

open source Kubernetes-native API gateway for microservices built on the Envoy Proxy
https://www.getambassador.io
Apache License 2.0
4.35k stars 681 forks source link

Logout using Ambassador and Keycloak does not redirect to redirect_uri on Keycloak. #3282

Open ashmlk opened 3 years ago

ashmlk commented 3 years ago

Ambassador and Keycloak logout cannot set redirect_uri on initiating RP logout

I have set up logging out via Ambassador and the Keycloak however, I recently noticed there is no way to set the redirect_uri in the javascript. According to Ambassador I currently use RP-initiated logout: https://www.getambassador.io/docs/latest/topics/using/filters/oauth2/#rp-initiated-logout

After this ir redirects me to: http://auth-server/auth/realms/{realm-name}/protocol/openid-connect/logout

However, according to Keycloak, we need to set up a redirect_uri=encodedRedirectUri

Is there a certain way that this can be done?

cindymullins-dw commented 2 years ago

It seems Keycloak supports this as of about March 2022, although it's unclear whether this would be enough. Leaving open as a feature request.