juanifioren / django-oidc-provider

OpenID Connect and OAuth2 provider implementation for Djangonauts.
http://django-oidc-provider.readthedocs.org
MIT License
425 stars 239 forks source link

Logout with redirect on Django 4.1+ #416

Open fzzylogic opened 10 months ago

fzzylogic commented 10 months ago

Noticed this, just mentioning fwiw. From 4.1, Django requires POST to logout.

EndSessionView inherits from LogoutView, so redirect to end_session_endpoint is blocked in Django 4.1+.

Redirect is correct as per the OID spec. Maybe have an intermediate function that posts to EndSession?