nginxinc / nginx-openid-connect

Reference implementation of OpenID Connect integration for NGINX Plus
https://www.nginx.com/products/nginx/
Other
199 stars 94 forks source link

Single Logout with 2 or more apps #103

Open sebacla opened 1 month ago

sebacla commented 1 month ago

Hi

I have two URLs hosted on my Nginx Plus proxy and I have an issue with this plugin and the logout function. A single user can connect to several URLs (SSO connection) URL 1: www.aaaaaaaa.com URL 2: www.bbbbbbb.com

When a user disconnects from an application we call the logout URL (eg: https://www.aaaaaaaa.com/logout ) the user is disconnected from all these sessions on our OpenID IDP and disconnected on the nginx side from the URL https://www.bbbbbbb.com but he remains connected on the NGINX side on the URL www.bbbbbbb.com while on the IDP side there is no more session.

How to disconnect the user on all URLs and the Single Logout working ?

anderius commented 3 weeks ago

Maybe you are affected by modern browsers not sending cookies from iframes? See my very recent feature request: https://github.com/nginxinc/nginx-openid-connect/issues/105