simpleidserver / SimpleIdServer

OpenID, OAuth 2.0, SCIM2.0, UMA2.0, FAPI, CIBA & OPENBANKING Framework for ASP.NET Core
https://simpleidserver.com/
Apache License 2.0
682 stars 90 forks source link

Turn off the user logout issue #750

Closed qq1176914912 closed 1 month ago

qq1176914912 commented 1 month ago

Hello, I'm sorry to bother you, but I have a question to ask for your advice. You now have a "Manual action is required to revoke a session" option for the client configuration. The current situation is that when the user clicks to withdraw, it will jump to the 5001 item and then jump back. I don't think is to perform a process (that is, don't jump to 5001), I am in your "CheckSessionController. Cs" method of "EndSession" added at the end of this code: image Because the front-end logout is more special, I made a judgment, the other are directly triggered 302 jump, so that the effect, when the user clicks exit, will directly exit, rather than jump to 5001, do you think I can do this, or is it safe? If so, can this feature also be added to the client configuration item?

simpleidserver commented 1 month ago

An acceptable solution is to redirect the user-agent to the "EndSessionCallback" action when the following conditions are met:

These modifications can be made for the release 5.0.0.

simpleidserver commented 1 month ago

The logic described above is implemented in the master branch.

qq1176914912 commented 1 month ago

The logic described above is implemented in the master branch.

Thank you very much. Thank you.