jfoshee / ServiceStack.Authentication.Aad

Azure Active Directory Authentication plugin for ServiceStack
MIT License
20 stars 10 forks source link

Remove unneeded TenantId from Logout request URL #3

Closed KevinHoward closed 8 years ago

jfoshee commented 8 years ago

The TenantId is in the BaseAuthUrl already. So perhaps the call to Fmt() should just be cleaned up? Or is the URL really wrong? Sadly at the time I worked on this the logout URL was not well documented. But I do recall manually testing it at that time. Have you come across better documentation on this? Thanks for contributing!

KevinHoward commented 8 years ago

The documentation is still a bit spotty. But from what I gather, you have to use either your domain name or tenantId in this part of the request URL when you don't specify your endpoints setup as being multi-tenant on Azure. If you do turn multi-tenant on, then you can also use "common". Is this in-line with what you thought?

jfoshee commented 8 years ago

My tests were about a year ago, and I was able to use common most of the time. I don't think I had multi-tenant enabled, but I am not sure. I would be glad to see the API become more stringent as you described.