Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OpenID Connect RP-Initiated Logout should be optional #11067

Closed
MarcialRosales opened this issue Apr 23, 2024 · 1 comment
Closed

OpenID Connect RP-Initiated Logout should be optional #11067

MarcialRosales opened this issue Apr 23, 2024 · 1 comment
Assignees
Milestone

Comments

@MarcialRosales
Copy link
Contributor

MarcialRosales commented Apr 23, 2024

Is your feature request related to a problem? Please describe.

Some customers have reported they get the error below when they try to authenticate on the management UI with OAuth 2.0 protocol:
OpenId Discovery endpoint https://someurl.com/.well-known/openid-configuration not compliant

This is because the Authorization Server does not support OpenID Connect RP-Initiated Logout and therefore it does not include the attribute end_session_endpoint in the payload returned by the OpenId Discovery endpoint.

Describe the solution you'd like

RabbitMQ management UI will only support OpenID Connect RP-Initiated Logout when the OpenId discovery endpoint includes the attribute end_session_endpoint.

If the attribute is not present, the user is only logged out from the management ui.

Describe alternatives you've considered

No response

Additional context

Documentation PR: rabbitmq/rabbitmq-website#1893.

@michaelklishin
Copy link
Member

@MarcialRosales I have moved it here from rabbitmq-website because the change involves more than just a doc update.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants