There is 1 update.
 
 
OpenId Connect / cid:jira-generated-image-avatar-1a1e1f8a-d79d-4dae-bdbe-9bae5b4abecf OIDC-319 In Progress

Add support for sending the RP-initiated logout request as POST instead of GET

 
View issue   ยท   Add comment
 

1 update

 
cid:jira-generated-image-avatar-494b7555-f4a6-4a77-8728-ea1f4a07f9da Changes by Thomas Mortagne on 09/Sep/26 13:48
 
Description: Currently, the RP-initiated logout is done through a redirect (so a GET), but it would be interesting to also allow configuring the authenticator to send POST request instead (as allowed by the specification) .

In terms of implementation, it probably means redirecting to a dedicate XWiki endpoint which tend use javascript to send the POST request to the provider, instead of directly redirecting to the provider's logout endpoint.