Trong Huu Nguyen 0ba41e312a feat(handler): local logout returns 204 instead of redirect ...

Redirecting after local logout introduces the possibility of matching a
path that automatically performs login, which for a local logout means
the user is automatically logged in again due to having an SSO session -
which nullifies the whole logout operation.

Applications that want local logout must trigger and handle the response
just like any other API call.

2023-04-21 16:25:26 +02:00

10 KiB

Raw Blame History

View Raw