Skip to content

openid-connect-session RPLogout does not work without id token #322

@danielwegener

Description

@danielwegener

Hi there. I have disabled the id_token in my auth configuration (since I do not need it). The spec (https://openid.net/specs/openid-connect-session-1_0.html#RPLogout) suggests to provide an id_token_hint, but it is not mandatory. However, angular-oauth2-oidc does seem to skip the OP logout redirect if no id_token is available (see https://github.com/manfredsteyer/angular-oauth2-oidc/blob/master/projects/lib/src/oauth-service.ts#L1701).
I wonder if we could remove this if-condition and simply omit the id_token_hint.

Metadata

Metadata

Assignees

No one assigned

    Labels

    feature-requestImprovements and additions to the library.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions