Skip to content

GitLab

  • Menu
Projects Groups Snippets
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • S single-sign-on
  • Project information
    • Project information
    • Activity
    • Labels
    • Planning hierarchy
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 2
    • Issues 2
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 0
    • Merge requests 0
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Packages & Registries
    • Packages & Registries
    • Package Registry
    • Container Registry
    • Infrastructure Registry
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • stackspin
  • single-sign-on
  • Issues
  • #28

Closed
Open
Created Jan 08, 2020 by Maarten de Waard@maartenOwner

Add support to configure logout URLs

I tried setting the logout (end session) URL for the WordPress OpenID plugin as follows:

endpoint_end_session: https://sso.{{ domain }}/oauth2/sessions/logout

If you set this, Hydra adds this error to the logs:

time="2020-01-07T13:04:44Z" level=info msg="completed handling request" measure#hydra/public: https://sso.oas.maartendewaard.nl/.latency=21857410 method=GET remote=213.108.105.8 request="/oauth2/sessions/logout?id_token_hint=eyJhbGciOiJSUzI1NiIsImtpZCI6InB1YmxpYzoyZDEyN2YzYS0yNmU1LTRkNTUtYTJlZS1lMjE4NGUzMjViYTMiLCJ0eXAiOiJKV1QifQ.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.StksFYU_QmnV52X-OfL9kWgx3Fm0obRgluYHIZWGXbRXVdoP_QdIDJsBmdhz3aev3sdSVhUXGo_L9PwYg-MSEQWYHE9z6RVP40ssmAHaas9dydGumyRtzQJdu2Adka9hCd5YKOjPD4SGYp6wClLHEyDiGzEoHHBXljlEELQbYRRctkKmbMEov60U3MJ4al4AmQVKIL3LDzzYjKwPh34TIv3ICl7f4q-8lKqDDeVgQEpriOmqa4BoW4wWfcbFgxSAtce0R77eO6x98tTSE6zw4cXhaTCMdIhmRrIbIw8S7k4FpMJkVRaD97-v1IZ7jq5qDsJmgdxElL3L-RfwrY7t2n3PZClzYb8S57hT6sIRQDM7utDalmP7bQF0mPltHbORQ15wKpogVXw2konCt0sHdmdICg6-zNCYK12RjCJWDKWFpOZ7lD8c6Ak9KweqCu0CXYP6zQ9DE0UDH3WmzqeW38aOIFeE_GUSK-oq6e3Kr1X1Q3S-IKCJDho5N0A5EPqWBMhoGOjZJZIcnGvXEuO_6Kp6c_E73GKdkuc1s4PIfTy7gHhFEudMvhgEJflrqON5DRxIoQ3TQc3APBWcuFdNDLkdN0ry8DpQM4qLNDd2HP8IrGpcOxPDMgz6JgX9qy50dkiDGjgnqC-Mpn97Rbh8PMfAgFonNgQFuTQ3VcZ5yt8&post_logout_redirect_uri=https%3A%2F%2Fwww.oas.maartendewaard.nl%2F%3Fopenappstack-login%26loggedout%3Dtrue%26wp_lang%3Den_US" request_id=8b111ea69d8e5c9a71a063893c0071b7 status=302 text_status=Found took=21.85741ms
time="2020-01-07T13:04:44Z" level=info msg="started handling request" method=GET remote=213.108.105.8 request="/oauth2/fallbacks/error?error=invalid_request&error_description=The+request+is+missing+a+required+parameter%2C+includes+an+invalid+parameter+value%2C+includes+a+parameter+more+than+once%2C+or+is+otherwise+malformed&error_hint=Logout+failed+because+query+parameter+post_logout_redirect_uri+is+not+a+whitelisted+as+a+post_logout_redirect_uri+for+the+client" request_id=4c77a8ae1573ff176103784ba1df6014
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking