TheArchive/zitadel
1
0
Fork 0
mirror of https://github.com/zitadel/zitadel.git synced 2025-08-12 04:57:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: use default redirect uri when not passed on end_session endpoint (#4054)

Browse Source 
* fix: use default redirect uri when not passed on end_session endpoint

* instance state
This commit is contained in:
Livio Spring
2022-07-27 09:49:16 +02:00
committed by GitHub
parent 8e94d2377b
commit c15577c1f9
6 changed files with 25 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
docs/docs/apis/openidoauth/endpoints.md
View File

@@ -323,7 +323,7 @@ Send a `client_assertion` as JWT for us to validate the signature against the re
{your_domain}/oauth/v2/introspect
This endpoint enables client to validate an `acccess_token`, either opaque or JWT. Unlike client side JWT validation,
This endpoint enables clients to validate an `acccess_token`, either opaque or JWT. Unlike client side JWT validation,
this endpoint will check if the token is not revoked (by client or logout).
| Parameter | Description |
@@ -499,9 +499,21 @@ curl --request POST \
## end_session_endpoint
{your_domain}/oidc/v1/endsession
{your_domain}/oidc/v1/end_session
> The end_session_endpoint is located with the login page, due to the need of accessing the same cookie domain
The endpoint has to be opened in the user agent (browser) to terminate the user sessions.
No parameters are needed apart from the user agent cookie, but you can provide the following to customize the behaviour:
| Parameter | Description |
|--------------------------|----------------------------------------------------------------------------------------------------------------------------------|
| id_token_hint | the id_token that was previously issued to the client |
| client_id | client_id of the application |
| post_logout_redirect_uri | Callback uri of the logout where the user (agent) will be redirected to. Must match exactly one of the preregistered in Console. |
| state | Opaque value used to maintain state between the request and the callback |
The `post_logout_redirect_uri` will be checked against the previously registered uris of the client provided by the `azp` claim of the `id_token_hint` or the `client_id` parameter.
If both parameters are provided, they must be equal.
## jwks_uri