Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: remove user locally if no logout url in IdP #10974

Merged
merged 3 commits into from
May 31, 2024
Merged

Conversation

kulmann
Copy link
Contributor

@kulmann kulmann commented May 28, 2024

Description

There are IdPs without an endSessionEndpoint (e.g. Authelia). In those cases we just need to unload the currently authenticated user.

Related Issue

Motivation and Context

Hardening.

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)
  • Technical debt
  • Tests
  • Documentation
  • Maintenance (e.g. dependency updates or tooling)

Copy link

update-docs bot commented May 28, 2024

Thanks for opening this pull request! The maintainers of this repository would appreciate it if you would create a changelog item based on your changes.

@kulmann kulmann force-pushed the fix-missing-logout-url branch from f9ea063 to 19dc4c1 Compare May 28, 2024 12:38
@kulmann
Copy link
Contributor Author

kulmann commented May 29, 2024

Currently thinking about how to test this properly. I'm looking into setting up authelia (because that doesn't have an endSessionEndpoint) and testing it with that... anyone different ideas?

@kulmann kulmann marked this pull request as draft May 29, 2024 14:28
@@ -82,7 +82,6 @@ export default defineComponent({
}
}
return {
name: 'login',
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No idea why we had the name key here... maybe just by mistake and it was really meant for the to route?!

@kulmann kulmann requested a review from JammingBen May 31, 2024 12:02
@kulmann kulmann marked this pull request as ready for review May 31, 2024 12:02
Copy link
Contributor

@JammingBen JammingBen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can't test it obviously, but code LGTM (aside from one spelling mistake :trollface: )

changelog/unreleased/bugfix-local-logout Outdated Show resolved Hide resolved
Co-authored-by: Jannik Stehle <50302941+JammingBen@users.noreply.github.com>
@kulmann kulmann enabled auto-merge (squash) May 31, 2024 12:15
Copy link

@kulmann kulmann merged commit 2ea62b4 into master May 31, 2024
3 checks passed
@delete-merged-branch delete-merged-branch bot deleted the fix-missing-logout-url branch May 31, 2024 12:37
@micbar micbar mentioned this pull request Jun 19, 2024
24 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants