kanboard / plugin-oauth2

Generic OAuth2 authentication plugin
MIT License
27 stars 33 forks source link

Support OIDC end_session_endpoint #29

Open phol opened 4 years ago

phol commented 4 years ago

Actual behaviour

When clicking "logout" in Kanboard, the user is logged out from Kanboard but still logged into the SSO provider. In my case; Keycloak. This may give an end-user the false impression of being logged out of all systems even though this is not the case.

Expected behaviour

The plugin makes sure the OIDC Logout URL is contacted when a user clicks the "logout" button in Kanboard. This could be an optional setting.

Someone recently implemented this same behaviour in the Matomo LoginOIDC plugin

Configuration