dotnet / dotnet/aspnetcore

Back-channel logout support for OpenIdConnect?

Open
#4,659 20 comments 18 reactions 0 assignees View on GitHub
affected-few area-auth enhancement severity-minor
Dominant language
C#
Stars
38.4k
Forks
10.9k
Avg merge
2d 10h
Merged PRs (30d)
281

Description

There is a default endpoint for front-channel signout: signout-oidc

Is there a plan to include a similar endpoint for back-channel signout in 2.1 release?
Spec: http://openid.net/specs/openid-connect-backchannel-1_0.html

Thank you.

Contributor guide

Open the contributing guide

Research direction

Read the OpenID Connect Back-Channel Logout specification linked in the issue and compare its requirements with the existing front-channel signout-oidc endpoint. Trace how that endpoint is exposed and determine the expected back-channel behavior; done means the requested support is implemented consistently with the specification and verified against the existing signout flow.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
authentication
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.