From bc2c2feefdf670c618d4bb14c76001288eb898e5 Mon Sep 17 00:00:00 2001 From: Livio Spring Date: Tue, 27 Aug 2024 17:26:42 +0200 Subject: [PATCH] docs(oidc): clarify post_logout_redirect_uri usage on end_session endpoint (#8480) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit # Which Problems Are Solved There was some confusion why the `post_logout_redirect_uri` would not be used on the `end_session` endpoint. # How the Problems Are Solved Explicitly add that it will be ignored if both `id_token_hint` and `client_id` are not sent. # Additional Changes None # Additional Context None --------- Co-authored-by: Tim Möhlmann --- docs/docs/apis/openidoauth/endpoints.mdx | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/docs/apis/openidoauth/endpoints.mdx b/docs/docs/apis/openidoauth/endpoints.mdx index 304ac3c53..ea6b1a081 100644 --- a/docs/docs/apis/openidoauth/endpoints.mdx +++ b/docs/docs/apis/openidoauth/endpoints.mdx @@ -665,6 +665,8 @@ No parameters are needed apart from the user agent cookie, but you can provide t The `post_logout_redirect_uri` will be checked against the previously registered uris of the client provided by the `azp` claim of the `id_token_hint` or the `client_id` parameter. If both parameters are provided, they must be equal. +If neither an `id_token_hint` nor a `client_id` parameter is provided, the `post_logout_redirect_uri` will be ignored. + ## jwks_uri `{your_domain}/oauth/v2/keys`