JanssenProject / JanssenProject/jans

Logout - RP-Initiated - User Confirmation page (optional, not required by conformance tests)

Open
#363 1 comment 0 reactions 1 assignee Claimed by @yuriyz View on GitHub
comp-jans-auth-server effort-8 kind-enhancement ready-for-triage
Dominant language
Java
Stars
648
Forks
174
Avg merge
1d 18h
Merged PRs (30d)
110

Description

_miltonbo commented on Feb 28, 2020_
### Issue
According to the documentation we SHOULD add a step in the logout endpoint when it is RP-Initiated. That step is to ask to the user whether he wants to log out.

**Documentation**
[https://openid.net/specs/openid-connect-session-1_0.html](url)

> At the logout endpoint, the OP SHOULD ask the End-User whether he wants to log out of the OP as well. If the End-User says "yes", then the OP MUST log out the End-User.

**SHOULD aclaration**
According to the [RFC documentation](https://www.rfc-editor.org/rfc/inline-errata/rfc2119.html) SHOULD word is the adjective "RECOMMENDED", means that there may exist valid reasons in particular circumstances to ignore a particular item, but the full implications must be understood and carefully weighed before choosing a different course.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.