This issue has been created
 
 
XWiki Platform / cid:jira-generated-image-avatar-97cc3487-d577-46f8-b86b-8ea3c1a1879f XWIKI-22714 Open

Allow to set an explicit redirect URL after logout

 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-e625576c-62f1-4bde-a11c-5ea93fe5bd92 Clemens Robbenhaar created this issue on 05/Dec/24 14:12
 
Summary: Allow to set an explicit redirect URL after logout
Issue Type: cid:jira-generated-image-avatar-97cc3487-d577-46f8-b86b-8ea3c1a1879f Improvement
Affects Versions: 15.10.14
Assignee: Unassigned
Created: 05/Dec/24 14:12
Priority: cid:jira-generated-image-static-minor-f7767a53-bd24-4318-b315-2c8229800ffb Minor
Reporter: Clemens Robbenhaar
Description:

Similar to OIDC-205, but independent of the current authenticator:

Currently after logout the browser is redirected to the page from which the user clicked the "Logout" link.

It would be nice to optionally allow to redirect to another URL instead (via configuration, not via request parameters). Use Cases:

  • the current page might be view protected and the user should be redirected to a public wiki page (instead of the login form, where it might be tricky to navigate back to the wiki)
  • some users prefer if they get a feedback like "you have been logged out" after logging out
  • also some authenticators might require an explicit "logout page"

This can be obtained by setting the "xredirect" request parameter of the logout link (currently in drawer.vm) to that configured value instead of the URL of the current page.