swagger-api / swagger-api/swagger-ui
Is it possible to do external logout when using OAuth?
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 29k
- Forks
- 9.3k
- Avg merge
- 2d 23h
- Merged PRs (30d)
- 25
Description
I am not sure if this is possible or not, but I am starting with support in case I've missed it.
OAuth works fairly well, I am able to sign in, and able to sign out - almost.
While the local session is cleared, it does not - at least not by default - clear the external session.
It is a common function of OIDC login to be able to do an external logout as well via the endsession endpoint (see https://openid.net/specs/openid-connect-session-1_0-17.html#OPMetadata).
So, is it possible to already configure this? - When clearing the local session to also end the session with the OIDC provider and be redirected back to the swagger with a now completely cleared session.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing Swagger UI's existing OAuth sign-out and local-session handling, then compare the available flow with the OpenID Connect endsession endpoint described in the linked specification. Define the supported configuration and redirect behavior, and consider the work complete when signing out clears the local session, ends the provider session, and returns to Swagger UI with no active session.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100