Azure / Azure/static-web-apps

OpenID Connect RP-Initiated Logout

Open
#977 1 comment 4 reactions 0 assignees View on GitHub
enhancement
Dominant language
No language data
Stars
346
Forks
67
PR merge metrics
No merged PRs in 30d

Description

**Is your feature request related to a problem? Please describe.**
At the moment, when using a Custom OIDC provider, logging out of the SWA via /.auth/logout does only end the session on SWA side, but not on the side of the identity provider. From what we understand, you support this behaviour just for Google and AAD.

To service our application we need to be able to end the session with the custom OIDC provider when initiating the logout via /.auth/logout

**Describe the solution you'd like**
Open ID Connect describes the OpenID Connect RP-Initiated Logout [here](https://openid.net/specs/openid-connect-rpinitiated-1_0.html), as part of [OpenID Connect Session Management](https://openid.net/specs/openid-connect-session-1_0.html). We would like to get this implemented.

**Describe alternatives you've considered**
Exposing the OIDC token s.t. we could write an Azure function to call the end session endpoint, which then in turn redirects to /.auth/logout to perform the logout an SWA side

**Additional context**
This is a make or break feature for use, as otherwise we cannot achieve the quality and security we want to provide with our application. Thank you for looking into this!

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.