CODEWITHSUNDEEP
sessionwso2wso2-identity-server
Askar Sanbayev
Askar Sanbayev

Reputation: 57

oidc/logout with id_token_hint is not working

I am sending https://localhost:9443/oidc/logout?id_token_hint=my_id_token and getting the page with the message Identity Server You have successfully logged out. But when I go back to the login page,it is returning authorization code instead of asking login/password.

Upvotes: 0

Views: 1760

Answers (1)

Sajith
Sajith

Reputation: 1269

According to the browser traces shared in the comments, it seems you are sending the logout request to an incorrect hostname+port (aisoip-devis.xxxxx.kz:9443). Due to that reason, the commonauthId cookie on the browser against the original hostname (aisoip-dev2.xxxxx.kz) is not cleared. Also, that cookie is not passed to WSO2 IS along with the logout request due to the hostname difference and WSO2 IS is unable to terminate the session on its side as well.

https://aisoip-devis.xxxxx.kz:9443/oidc/logout

https://aisoip-dev2.xxxxx.kz/oauth2/authorize

To correct this issue, you will have to send the logout request to the same hostname+port pair where you are sending the authentication request.

https://aisoip-dev2.xxxxx.kz/oidc/logout

Upvotes: 1

Related Questions