oidc/logout with id_token_hint is not working

这一生的挚爱 提交于 2021-01-07 02:35:32

问题


I am sending https://localhost:9443/oidc/logout?id_token_hint=my_id_token and getting the page with the message Identity Server You have successfully logged out. But when I go back to the login page,it is returning authorization code instead of asking login/password.


回答1:


According to the browser traces shared in the comments, it seems you are sending the logout request to an incorrect hostname+port (aisoip-devis.xxxxx.kz:9443). Due to that reason, the commonauthId cookie on the browser against the original hostname (aisoip-dev2.xxxxx.kz) is not cleared. Also, that cookie is not passed to WSO2 IS along with the logout request due to the hostname difference and WSO2 IS is unable to terminate the session on its side as well.

https://aisoip-devis.xxxxx.kz:9443/oidc/logout

https://aisoip-dev2.xxxxx.kz/oauth2/authorize

To correct this issue, you will have to send the logout request to the same hostname+port pair where you are sending the authentication request.

https://aisoip-dev2.xxxxx.kz/oidc/logout


来源:https://stackoverflow.com/questions/65473068/oidc-logout-with-id-token-hint-is-not-working

易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!