omniauth / omniauth_openid_connect

MIT License
168 stars 187 forks source link

Add RP initiated logout with `id_token_hint` request parameter #164

Closed steventux closed 1 year ago

steventux commented 1 year ago

Encode id_token_hint parameter when present in the request query.

It is recommended that an id_token_hint parameter is supplied in an RP initiated logout request. OIDC compliant libraries such as node-oidc-provider will not redirect to the unless valid id_token_hint or client_id parameters are present.

See: https://openid.net/specs/openid-connect-rpinitiated-1_0.html for recommendation.

steventux commented 1 year ago

Duplicates https://github.com/omniauth/omniauth_openid_connect/pull/149/files