JanssenProject / JanssenProject/jans
Logout - RP-Initiated - User Confirmation page (optional, not required by conformance tests)
- Dominant language
- Java
- Stars
- 648
- Forks
- 174
- Avg merge
- 1d 18h
- Merged PRs (30d)
- 110
Description
_miltonbo commented on Feb 28, 2020_
### Issue
According to the documentation we SHOULD add a step in the logout endpoint when it is RP-Initiated. That step is to ask to the user whether he wants to log out.
**Documentation**
[https://openid.net/specs/openid-connect-session-1_0.html](url)
> At the logout endpoint, the OP SHOULD ask the End-User whether he wants to log out of the OP as well. If the End-User says "yes", then the OP MUST log out the End-User.
**SHOULD aclaration**
According to the [RFC documentation](https://www.rfc-editor.org/rfc/inline-errata/rfc2119.html) SHOULD word is the adjective "RECOMMENDED", means that there may exist valid reasons in particular circumstances to ignore a particular item, but the full implications must be understood and carefully weighed before choosing a different course.
Contributor guide
Assessment
This issue has not been assessed yet.