Livio Spring
041af26917
feat(OIDC): add back channel logout ( #8837 )
...
# Which Problems Are Solved
Currently ZITADEL supports RP-initiated logout for clients. Back-channel
logout ensures that user sessions are terminated across all connected
applications, even if the user closes their browser or loses
connectivity providing a more secure alternative for certain use cases.
# How the Problems Are Solved
If the feature is activated and the client used for the authentication
has a back_channel_logout_uri configured, a
`session_logout.back_channel` will be registered. Once a user terminates
their session, a (notification) handler will send a SET (form POST) to
the registered uri containing a logout_token (with the user's ID and
session ID).
- A new feature "back_channel_logout" is added on system and instance
level
- A `back_channel_logout_uri` can be managed on OIDC applications
- Added a `session_logout` aggregate to register and inform about sent
`back_channel` notifications
- Added a `SecurityEventToken` channel and `Form`message type in the
notification handlers
- Added `TriggeredAtOrigin` fields to `HumanSignedOut` and
`TerminateSession` events for notification handling
- Exported various functions and types in the `oidc` package to be able
to reuse for token signing in the back_channel notifier.
- To prevent that current existing session termination events will be
handled, a setup step is added to set the `current_states` for the
`projections.notifications_back_channel_logout` to the current position
- [x] requires https://github.com/zitadel/oidc/pull/671
# Additional Changes
- Updated all OTEL dependencies to v1.29.0, since OIDC already updated
some of them to that version.
- Single Session Termination feature is correctly checked (fixed feature
mapping)
# Additional Context
- closes https://github.com/zitadel/zitadel/issues/8467
- TODO:
- Documentation
- UI to be done: https://github.com/zitadel/zitadel/issues/8469
---------
Co-authored-by: Hidde Wieringa <hidde@hiddewieringa.nl>
2024-10-31 15:57:17 +01:00
..
2023-12-08 15:30:55 +01:00
2024-05-04 11:55:57 +02:00
2024-07-31 14:42:12 +02:00
2024-08-12 22:32:01 +02:00
2024-07-31 14:42:12 +02:00
2024-05-04 11:55:57 +02:00
2024-05-04 11:55:57 +02:00
2024-08-12 22:32:01 +02:00
2024-08-12 22:32:01 +02:00
2023-12-08 15:30:55 +01:00
2024-06-17 09:50:12 +00:00
2024-08-12 22:32:01 +02:00
2024-06-17 09:50:12 +00:00
2024-10-28 08:29:34 +00:00
2023-12-05 17:01:03 +00:00
2024-10-28 08:29:34 +00:00
2024-08-12 22:32:01 +02:00
2024-09-26 09:14:33 +02:00
2024-09-26 09:14:33 +02:00
2024-08-28 05:33:20 +00:00
2024-08-28 05:33:20 +00:00
2022-12-01 13:31:46 +01:00
2024-09-11 08:24:00 +00:00
2024-09-11 08:24:00 +00:00
2024-09-11 08:24:00 +00:00
2022-04-26 23:01:45 +00:00
2024-09-03 13:19:00 +00:00
2024-09-17 13:21:49 +00:00
2024-09-17 13:21:49 +00:00
2024-09-11 10:53:55 +00:00
2023-10-19 15:21:31 +00:00
2022-04-26 23:01:45 +00:00
2022-04-26 23:01:45 +00:00
2022-10-17 19:19:15 +00:00
2024-05-07 06:11:20 +00:00
2024-08-12 22:32:01 +02:00
2024-07-04 14:11:06 +00:00
2023-12-08 15:30:55 +01:00
2024-05-23 05:04:07 +00:00
2024-06-19 12:56:33 +02:00
2024-05-13 16:01:50 +02:00
2024-04-03 10:43:43 +00:00
2024-08-28 05:33:20 +00:00
2024-06-17 12:47:38 +00:00
2024-04-03 10:43:43 +00:00
2024-08-12 22:32:01 +02:00
2024-06-17 12:47:38 +00:00
2023-10-19 12:19:10 +02:00
2024-08-12 22:32:01 +02:00
2023-12-08 15:30:55 +01:00
2023-10-19 12:19:10 +02:00
2024-08-12 22:32:01 +02:00
2023-12-08 15:30:55 +01:00
2023-10-19 15:21:31 +00:00
2024-10-31 15:57:17 +01:00
2024-07-31 18:00:38 +03:00
2024-10-31 15:57:17 +01:00
2024-09-04 10:14:50 +00:00
2024-10-31 15:57:17 +01:00
2024-04-03 10:43:43 +00:00
2023-12-08 15:30:55 +01:00
2024-04-09 19:32:00 +00:00
2024-04-03 10:43:43 +00:00
2023-12-08 15:30:55 +01:00
2023-12-08 15:30:55 +01:00
2024-05-23 05:04:07 +00:00
2024-04-05 09:35:49 +00:00
2023-12-08 15:30:55 +01:00
2023-12-08 15:30:55 +01:00
2024-08-12 22:32:01 +02:00
2024-10-11 08:09:51 +00:00
2022-04-26 23:01:45 +00:00
2024-08-12 22:32:01 +02:00
2023-12-08 15:30:55 +01:00
2024-04-11 09:16:10 +02:00
2022-04-26 23:01:45 +00:00
2024-08-12 22:32:01 +02:00
2023-12-08 15:30:55 +01:00
2023-12-08 15:30:55 +01:00
2024-08-12 22:32:01 +02:00
2023-12-21 10:03:37 +01:00
2023-10-26 05:54:09 +00:00
2024-08-12 22:32:01 +02:00
2024-05-23 12:28:46 +02:00
2022-04-26 23:01:45 +00:00
2023-10-19 12:19:10 +02:00
2024-04-03 10:43:43 +00:00
2024-08-12 22:32:01 +02:00
2023-12-19 10:25:50 +00:00
2024-04-03 10:43:43 +00:00
2024-04-03 10:43:43 +00:00
2023-12-08 15:30:55 +01:00
2023-01-25 09:49:41 +01:00
2024-08-12 22:32:01 +02:00
2023-12-08 15:30:55 +01:00
2024-04-03 10:43:43 +00:00
2024-08-12 22:32:01 +02:00
2023-12-08 15:30:55 +01:00
2024-04-03 10:43:43 +00:00
2024-08-12 22:32:01 +02:00
2023-12-08 15:30:55 +01:00
2024-04-10 09:14:55 +00:00
2024-08-12 22:32:01 +02:00
2024-05-30 22:08:48 +00:00
2024-05-13 16:01:50 +02:00
2024-08-12 22:32:01 +02:00
2024-05-13 16:01:50 +02:00
2024-03-20 10:18:46 +00:00
2024-02-28 10:21:11 +00:00
2023-10-19 12:19:10 +02:00
2024-08-12 22:32:01 +02:00
2023-12-08 15:30:55 +01:00
2024-09-13 13:22:25 +00:00
2024-10-31 15:57:17 +01:00
2024-08-12 22:32:01 +02:00
2024-07-31 18:00:38 +03:00
2024-07-31 18:00:38 +03:00
2024-10-28 08:29:34 +00:00
2022-04-26 23:01:45 +00:00
2024-08-14 14:18:14 +00:00
2024-08-14 14:18:14 +00:00
2024-01-17 10:16:48 +00:00
2024-01-17 10:16:48 +00:00
2024-08-12 22:32:01 +02:00
2024-01-17 10:16:48 +00:00
2024-10-31 15:57:17 +01:00
2024-10-31 15:57:17 +01:00
2024-07-31 18:00:38 +03:00
2022-04-26 23:01:45 +00:00
2022-10-07 09:44:28 +00:00
2024-10-28 08:29:34 +00:00
2024-10-28 08:29:34 +00:00
2024-10-28 08:29:34 +00:00
2022-04-26 23:01:45 +00:00
2024-05-16 07:07:56 +02:00
2024-10-31 15:57:17 +01:00
2024-10-31 15:57:17 +01:00
2022-04-26 23:01:45 +00:00
2024-08-12 22:32:01 +02:00
2024-06-19 12:56:33 +02:00
2024-05-13 16:01:50 +02:00
2022-04-26 23:01:45 +00:00
2024-08-28 05:33:20 +00:00
2024-06-19 12:56:33 +02:00
2022-04-26 23:01:45 +00:00
2024-08-12 22:32:01 +02:00
2024-06-19 12:56:33 +02:00
2023-10-19 15:21:31 +00:00
2024-08-12 22:32:01 +02:00
2024-07-31 18:00:38 +03:00
2022-04-26 23:01:45 +00:00
2024-08-12 22:32:01 +02:00
2024-06-19 12:56:33 +02:00
2024-04-03 10:43:43 +00:00
2024-08-12 22:32:01 +02:00
2024-06-19 12:56:33 +02:00
2024-04-03 10:43:43 +00:00
2023-12-08 15:30:55 +01:00
2023-12-08 15:30:55 +01:00
2024-05-23 05:04:07 +00:00
2024-04-05 09:35:49 +00:00
2023-12-08 15:30:55 +01:00
2023-12-08 15:30:55 +01:00
2024-09-06 14:47:57 +02:00
2024-05-23 05:04:07 +00:00
2022-04-26 23:01:45 +00:00
2024-08-12 22:32:01 +02:00
2024-06-19 12:56:33 +02:00
2022-09-20 14:32:09 +00:00
2024-08-12 22:32:01 +02:00
2023-12-08 15:30:55 +01:00
2022-11-30 17:01:17 +01:00
2023-12-08 15:30:55 +01:00
2024-08-12 22:32:01 +02:00
2024-06-19 12:56:33 +02:00
2024-04-03 10:43:43 +00:00
2024-08-12 22:32:01 +02:00
2024-06-19 12:56:33 +02:00
2024-04-10 09:14:55 +00:00
2024-04-10 09:14:55 +00:00
2024-06-19 12:56:33 +02:00
2022-11-30 17:01:17 +01:00
2022-04-26 23:01:45 +00:00
2024-04-03 10:43:43 +00:00
2024-08-12 22:32:01 +02:00
2024-06-19 12:56:33 +02:00
2024-04-03 10:43:43 +00:00
2023-12-08 15:30:55 +01:00
2023-12-08 15:30:55 +01:00
2023-01-25 09:49:41 +01:00
2024-08-12 22:32:01 +02:00
2023-12-08 15:30:55 +01:00
2024-04-03 10:43:43 +00:00
2024-08-12 22:32:01 +02:00
2023-12-08 15:30:55 +01:00
2024-04-03 10:43:43 +00:00
2024-08-12 22:32:01 +02:00
2024-06-19 12:56:33 +02:00
2024-05-13 16:01:50 +02:00
2024-08-12 22:32:01 +02:00
2024-06-19 12:56:33 +02:00
2024-07-31 18:00:38 +03:00
2024-07-31 18:00:38 +03:00
2023-12-08 15:30:55 +01:00
2024-09-26 09:14:33 +02:00
2023-10-26 05:54:09 +00:00
2022-04-26 23:01:45 +00:00
2023-07-20 04:06:16 +00:00
2022-04-26 23:01:45 +00:00
2023-01-25 09:49:41 +01:00
2022-12-08 08:11:49 +01:00
2022-04-26 23:01:45 +00:00
2023-12-08 15:30:55 +01:00
2024-04-10 09:14:55 +00:00
2024-05-13 16:01:50 +02:00
2024-08-12 22:32:01 +02:00
2024-04-05 09:35:49 +00:00
2024-08-28 18:19:50 +00:00
2024-08-28 18:19:50 +00:00
2024-04-03 10:43:43 +00:00
2024-04-05 09:35:49 +00:00
2024-06-19 12:56:33 +02:00
2022-04-26 23:01:45 +00:00
2024-10-31 15:57:17 +01:00
2024-10-31 15:57:17 +01:00
2024-10-31 15:57:17 +01:00
2023-04-05 11:42:00 +00:00
2024-10-28 08:29:34 +00:00
2024-10-28 08:29:34 +00:00
2024-08-12 22:32:01 +02:00
2024-06-19 12:56:33 +02:00
2024-10-31 15:57:17 +01:00
2022-04-26 23:01:45 +00:00
2024-08-12 22:32:01 +02:00
2024-06-20 13:31:58 +00:00
2024-10-30 08:53:00 +00:00
2024-10-30 08:53:00 +00:00
2024-10-30 08:53:00 +00:00
2022-04-26 23:01:45 +00:00
2024-08-12 22:32:01 +02:00
2024-06-19 12:56:33 +02:00
2022-04-26 23:01:45 +00:00
2024-10-30 08:53:00 +00:00
2022-04-26 23:01:45 +00:00
2024-08-12 22:32:01 +02:00
2024-07-03 15:00:56 +00:00
2024-10-28 08:29:34 +00:00
2024-10-28 08:29:34 +00:00
2023-12-08 15:30:55 +01:00
2023-12-08 15:30:55 +01:00
2023-10-19 12:19:10 +02:00
2023-09-15 16:58:45 +02:00
2024-08-12 22:32:01 +02:00
2023-12-08 15:30:55 +01:00
2023-12-09 08:59:51 +00:00
2023-12-05 11:12:01 +00:00
2024-08-12 22:32:01 +02:00
2024-04-08 08:15:44 +00:00
2023-08-11 15:36:18 +00:00
2024-09-26 09:14:33 +02:00
2024-10-07 07:12:44 +02:00
2024-10-10 13:53:32 +00:00
2024-08-12 22:32:01 +02:00
2024-05-30 22:08:48 +00:00
2023-12-08 15:30:55 +01:00
2024-10-07 07:12:44 +02:00
2024-09-26 09:14:33 +02:00
2024-09-26 09:14:33 +02:00
2024-09-26 09:14:33 +02:00
2024-09-12 06:27:29 +02:00
2024-09-12 06:27:29 +02:00
2022-04-26 23:01:45 +00:00
2024-10-31 15:57:17 +01:00
2024-09-04 10:14:50 +00:00
2024-10-31 15:57:17 +01:00
2023-10-19 15:21:31 +00:00
2024-01-02 14:26:31 +00:00
2024-05-16 07:07:56 +02:00
2023-12-08 15:30:55 +01:00
2024-06-19 12:56:33 +02:00
2022-04-26 23:01:45 +00:00
2022-08-24 11:38:59 +02:00
2024-08-12 22:32:01 +02:00
2024-07-04 16:18:43 +00:00
2024-04-03 10:43:43 +00:00
2022-04-26 23:01:45 +00:00
2023-12-08 15:30:55 +01:00
2023-12-08 15:30:55 +01:00
2024-08-12 22:32:01 +02:00
2023-12-08 15:30:55 +01:00
2024-04-24 17:50:58 +02:00
2024-08-12 22:32:01 +02:00
2024-07-17 06:43:07 +02:00
2024-04-24 17:50:58 +02:00
2024-08-12 22:32:01 +02:00
2024-05-02 11:50:13 +02:00
2023-09-07 14:06:11 +00:00
2024-09-26 09:14:33 +02:00
2024-09-26 09:14:33 +02:00
2024-09-26 09:14:33 +02:00
2024-09-26 09:14:33 +02:00
2024-09-26 09:14:33 +02:00
2024-09-26 09:14:33 +02:00
2024-09-26 09:14:33 +02:00
2024-09-26 09:14:33 +02:00
2024-09-26 09:14:33 +02:00
2024-04-03 10:43:43 +00:00
2023-12-08 15:30:55 +01:00
2023-12-08 15:30:55 +01:00
2024-04-03 10:43:43 +00:00
2024-08-12 22:32:01 +02:00
2024-05-16 07:07:56 +02:00
2024-10-31 15:57:17 +01:00
2023-08-11 15:36:18 +00:00
2024-07-26 22:39:55 +02:00
2024-10-31 15:57:17 +01:00
2023-08-04 11:35:36 +02:00
2024-08-14 13:04:26 +00:00
2024-08-14 13:04:26 +00:00
2024-04-03 10:43:43 +00:00
2024-08-12 22:32:01 +02:00
2024-06-19 12:56:33 +02:00
2024-04-05 09:35:49 +00:00
2024-08-12 22:32:01 +02:00
2024-04-05 09:35:49 +00:00
2024-08-12 22:32:01 +02:00
2024-06-19 12:56:33 +02:00
2022-07-06 14:09:49 +02:00
2022-11-30 17:01:17 +01:00
2024-08-12 22:32:01 +02:00
2024-06-19 12:56:33 +02:00
2024-10-07 16:50:17 +02:00
2023-12-08 15:30:55 +01:00
2023-12-08 15:30:55 +01:00
2024-04-03 10:43:43 +00:00
2024-08-12 22:32:01 +02:00
2023-12-08 15:30:55 +01:00
2024-09-17 08:27:48 +00:00
2024-08-28 19:46:45 +00:00
2024-09-17 08:27:48 +00:00
2024-08-12 22:32:01 +02:00
2024-08-12 22:32:01 +02:00
2024-05-03 07:23:40 +00:00
2024-10-07 07:12:44 +02:00
2024-09-26 09:14:33 +02:00
2024-09-11 10:53:55 +00:00
2024-09-11 10:53:55 +00:00
2024-09-11 10:53:55 +00:00
2024-10-07 07:12:44 +02:00
2024-09-26 09:14:33 +02:00
2024-09-11 10:53:55 +00:00
2024-09-11 10:53:55 +00:00
2024-10-07 07:12:44 +02:00
2024-10-07 07:12:44 +02:00
2024-09-26 09:14:33 +02:00
2024-09-26 09:14:33 +02:00
2024-08-12 22:32:01 +02:00
2024-05-14 09:20:31 +02:00
2024-05-07 05:38:26 +00:00
2024-07-31 18:00:38 +03:00
2024-05-07 05:38:26 +00:00
2024-07-05 09:36:00 +02:00
2023-12-21 10:03:37 +01:00
2024-09-25 13:31:31 +00:00
2024-09-25 13:31:31 +00:00
2024-09-26 09:14:33 +02:00
2024-09-26 09:14:33 +02:00
2024-09-26 09:14:33 +02:00
2024-09-26 09:14:33 +02:00
2024-09-26 09:14:33 +02:00
2024-09-11 10:53:55 +00:00
2024-08-14 14:18:14 +00:00
2024-08-14 14:18:14 +00:00
2024-08-14 14:18:14 +00:00