Skip to content
#

authorization

Here are 1,611 public repositories matching this topic...

mitar
mitar commented Aug 15, 2020

At least in the latest spec: https://openid.net/specs/openid-connect-rpinitiated-1_0.html

Currently Hydra uses id_token_hint to determine if logout is RP-initiated or OP-initiated. I do not think this is possible by relaying on id_token_hint.

Looking at the implementation of issueLogoutVerifier I think the logic is correct (if id_token_hint is missing, you ask for consent, if it is p

Improve this page

Add a description, image, and links to the authorization topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the authorization topic, visit your repo's landing page and select "manage topics."

Learn more

You can’t perform that action at this time.