Add support for getting end_session_endpoint from OIDC Configuration

[mraible]

Summary

Okta has an end_session_endpoint property that can be used to construct a global logout that happens on the client. Example code here.

It would be nice if Spring Security's OIDC support provided a way to access this end_session_endpoint. This property is present in ./well-known/openid-configuration.

Version

5.1.0.BUILD-SNAPSHOT

Sample

https://github.com/oktadeveloper/okta-spring-boot-react-crud-example/compare/spring-security-5.1

[jgrandja]

Related #5350

[jgrandja]

@mraible Thanks for the report!

There currently is OpenID Connect Discovery code in OidcConfigurationProvider. One of our tasks is to extract that bit of code so it can be re-used in other places within Spring Security.

We'll get this in for 5.1

[jgrandja]

@mraible This is now available via 057587e.

To access end_session_endpoint do this:

ClientRegistration.getProviderDetails().getConfigurationMetadata().get("end_session_endpoint")

[mraible]

@jgrandja Is it possible to inject the ClientRegistration into a RestController? It doesn't seem like it.

[rwinch]

@mraible You can pass in the ClientRegistrationRepository and look it up.

@Autowired
public void setClientRegistrationRepository(ClientRegistrationRepository registrations) {
    this.registration = registrations.findByRegistrationId("okta");
}

Alternatively you could use SpeL to get the ClientRegistration itself.

public void setClientRegistration(
    @Value("#{@clientRegistrationRepository.findByRegistrationId('okta')}") ClientRegistration clientRegistration) {
    this.registration = clientRegistration;
}

Of course you could take it a step further and just get the endpoint you want:

public void setEndpoint(
    @Value("#{@clientRegistrationRepository.findByRegistrationId('okta')?.providerDetails?.configurationMetadata['end_session_endpoint']}") String endpoint) {
    this.endpoint = endpoint;
}

If that is just too much SpEL you can place that into a Bean too:

@Component
class OktaMetadata {
    ClientRegistrationRepository r;
    OktaMetadata(ClientRegistrationRepository r) {
        this.r = r;
    }

    String getEndpoint() {
        return (String) this.r.findByRegistrationId("okta").getProviderDetails().getConfigurationMetadata().get(end_session_endpoint");
    }
}

public void setEndpoint(
    @Value("#{@oktaMetadata.endpoint}") String endpoint) {
    this.endpoint = endpoint;
}