JanssenProject / JanssenProject/jans
Improve backchannel logout : gather status of each backchannel logout response into EndSessionContext
Open
comp-jans-auth-server
kind-enhancement
needs-triage
- Dominant language
- Java
- Stars
- 647
- Forks
- 173
- Avg merge
- 1d 18h
- Merged PRs (30d)
- 110
Description
## Describe the issue
Looking at EndSessionUtils.java, it appears that the response status (sucess or fail) from the RP is just silently logged, but otherwise ignored.
We can capturing the success/failure result of each backchannel logout request in the EndSessionContext object that is made available to end_session interception scripts. This would allow us to display a page that warns users that not all of their RP sessions were successfully logged-out.
Support: 9081
Contributor guide
Assessment
This issue has not been assessed yet.