Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

keycloak: investigate end_session_endpoint #592

Open
mdonadoni opened this issue May 17, 2023 · 1 comment
Open

keycloak: investigate end_session_endpoint #592

mdonadoni opened this issue May 17, 2023 · 1 comment
Labels
community/punch4nfdi priority/longterm size/s

Comments

@mdonadoni
Copy link
Member

Keycloak/OIDC provides a way to end the Keycloak session when a user logs out from one of his applications, by means of the end_session_endpoint API endpoint. This is currently not used by REANA, neither for CERN SSO nor for Keycloak.

As an example, the API endpoint is https://auth.cern.ch/auth/realms/cern/protocol/openid-connect/logout for CERN SSO.

We should:

  • investigate whether invenio-oauthclient supports this logout mechanism
  • find out which would be the benefits of supporting this in REANA
  • check what is the behaviour of Keycloak, in particular whether is it possible to log out only from REANA and not from all of the other applications authenticated through Keycloak (we are interested in the former)
  • discuss how to proceed
@mdonadoni mdonadoni added this to 0.95.0 Aug 8, 2024
@mdonadoni mdonadoni moved this to Backlog in 0.95.0 Aug 8, 2024
@mdonadoni
Copy link
Member Author

This is now supported by invenio-oauthclient v3.1.0: inveniosoftware/invenio-oauthclient@6bc629c

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
community/punch4nfdi priority/longterm size/s
Projects
0.95.0
Status: Backlog
Milestone
No milestone
Development

No branches or pull requests
1 participant
@mdonadoni