openid / openid/AppAuth-JS

Require a redirect flow for end_session endpoint handling

Open
#52 17 comments 6 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement question
Dominant language
TypeScript
Stars
1k
Forks
165
PR merge metrics
No merged PRs in 30d

Description

I've forked here and added support for the end_session endpoint similar to the existing authorize endpoint. It's working for my purposes.

Rather than submit a pull request, and in the spirit of the contributing guidelines, I thought I'd best ask if this is the direction you want to go?

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the fork's dev branch and compare the proposed end_session support with the existing authorize endpoint. Review the requested redirect flow and determine the maintainers' intended direction before changing the SDK. Done means end_session handling follows the accepted design and works for the relevant OpenID Connect provider flow.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
authentication, web-dev
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.