You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Description:
When an application sends an encrypted id_token_hint (encrypted from the WSO2 IS public certificate) in the logout flow, it should send tenant domain also as a query param. So the logout URL should be in the following format.
The URL will look like below: https://localhost:9443/oidc/logout?id_token_hint=<id_token>&post_logout_redirect_uri=<redirect URI>&state=<state>&tenant_domain=<tenant domain>
Description:
When an application sends an encrypted id_token_hint (encrypted from the WSO2 IS public certificate) in the logout flow, it should send tenant domain also as a query param. So the logout URL should be in the following format.
The URL will look like below:
https://localhost:9443/oidc/logout?id_token_hint=<id_token>&post_logout_redirect_uri=<redirect URI>&state=<state>&tenant_domain=<tenant domain>
Example:
The docs in [1], [2] should be updated with the above details.
Affected Product Version:
From IS 5.10.0 to above versions.
Related Issues:
wso2/product-is#8676
[1] https://is.docs.wso2.com/en/latest/learn/testing-oidc-encrypted-id-token-with-is/
[2] https://is.docs.wso2.com/en/latest/learn/openid-connect-logout-url-redirection/
The text was updated successfully, but these errors were encountered: