juanifioren / django-oidc-provider

OpenID Connect and OAuth2 provider implementation for Djangonauts.
http://django-oidc-provider.readthedocs.org
MIT License
416 stars 239 forks source link

Logout with redirect on Django 4.1+ #416

Open fzzylogic opened 8 months ago

fzzylogic commented 8 months ago

Noticed this, just mentioning fwiw. From 4.1, Django requires POST to logout.

EndSessionView inherits from LogoutView, so redirect to end_session_endpoint is blocked in Django 4.1+.

Redirect is correct as per the OID spec. Maybe have an intermediate function that posts to EndSession?