| Currently, the RP-initiated logout is done through a redirect (so a GET), but it would be interesting to also allow configuring the authenticator to send POST request instead. In terms of implementation, it probably means redirecting to a dedicate XWiki endpoint which tend use javascript to send the POST request to the provider, instead of directly redirecting to the provider's logout endpoint. |
