You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We decided to not include update which accept only session_state instead of id_token into 2.4.4 SP2 to avoid breaking compatibility.
I think in 3.0.0 we can include this. But it should accept both id_token (OPTIONAL according spec) and session_state (our custom parameter).
The workflow should be next:
if (id_token is exists) {
// end_session using id_token
} else if (session_state is exists) {
// end_session using session_state
} else {
// throws error about missing paramters
}
The text was updated successfully, but these errors were encountered:
We decided to not include update which accept only session_state instead of id_token into 2.4.4 SP2 to avoid breaking compatibility.
I think in 3.0.0 we can include this. But it should accept both id_token (OPTIONAL according spec) and session_state (our custom parameter).
The workflow should be next:
if (id_token is exists) {
// end_session using id_token
} else if (session_state is exists) {
// end_session using session_state
} else {
// throws error about missing paramters
}
The text was updated successfully, but these errors were encountered: