Automattic / Automattic/wp-openid-connect-server
Support for back-channel logout
- Dominant language
- PHP
- Stars
- 44
- Forks
- 13
- PR merge metrics
- No merged PRs in 30d
Description
OIDC spec defines a way to log out the user on OIDC client when a logout happens on provider side i.e. WordPress side in our instance
[Reference](https://openid.net/specs/openid-connect-backchannel-1_0.html)
Synapse also [supports](https://matrix-org.github.io/synapse/develop/openid.html#oidc-back-channel-logout) this.
Contributor guide
Research direction
Start by reading the OIDC back-channel logout specification and the linked Synapse documentation, then inspect this project’s existing provider-side logout and client session handling. Done means a provider-side logout reliably logs the user out of the OIDC client according to the referenced specification, with the relevant behavior verified.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php, wordpress
- Domain
- authentication
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100