This issue has been created
 
 
OpenId Connect / cid:jira-generated-image-avatar-8a6183a8-23f7-43f5-9ab5-987c76f196fc OIDC-205 Open

Allow to set redirect URL after logout

 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-cfc9689b-ba44-4fa8-97e5-30a96f4d2053 Clemens Robbenhaar created this issue on 04/Dec/24 23:35
 
Summary: Allow to set redirect URL after logout
Issue Type: cid:jira-generated-image-avatar-8a6183a8-23f7-43f5-9ab5-987c76f196fc Improvement
Affects Versions: 2.13.1
Assignee: Unassigned
Components: Authenticator
Created: 04/Dec/24 23:35
Priority: cid:jira-generated-image-static-minor-93c76862-d453-48b2-9c37-7fe7c34d5fca Minor
Reporter: Clemens Robbenhaar
Description:

Currently after logout the browser is redirected to the page from which the user clicked the "Logout" link.

It should be possible to redirect to another URL instead (via configuration, not via request parameters). Use Cases:

  • the current page might be view protected and the user should be redirected to a public wiki page (instead of the login form, where it might be tricky to navigate back to the wiki
  • as the logout also logs the user out of all other Open-ID sessions, the Open-ID provider might provide a generic logout page, but still honoring the redirect_after_logout parameter. Configuring the parameter in XWiki would allow to redirect to the "common logout page".
  • also users reported that their OpenID provider is rather restrictive what it allows as "redirect_after_logout" and limits it to certain fixed URLs; listing every page in XWiki for that provider is clearly impracticable.