Open azmeuk opened 3 years ago
Hi @azmeuk
I would like to put a delay on this ticket. I'm working on to make an Authlib 1.0 release. This can be something later, maybe 1.2 or 1.3.
For the record, the specification is not a draft anymore since september 12th
It seems 1.3 was missed.
I suggest implementing the OpenID Connect session management draft in authlib, even if it is still a draft. There has been 30 iterations, so it feels quite stable now. Authlib could warn the user with a message like: this is a draft, API may brutally change to follow the draft iterations, use it at your own risks.
That would mean providing:
session_state
parameter to the authorization response;check_session_iframe
endpoint, and iframe content;end_session_endpoint
endpoint.What do you think?
Related issues #500 #560 #561