Await Logout till endSession is complete in logout

[pgangwani]

Issue and Steps to Reproduce

In logout we have below steps

1. revoke access token
2. revoke refresh token
3. endsession (idtoken)
4. Either soft redirect / refresh the session or
5. or redirect to oidc server logout url

As 4 or 5 are exclusive steps , I am expecting async logout to await till all promises resolve including endSession.
I am thinking to get below case worked

Currently what is happening that if I am writing the window.location.href after await of logout, endSession request is cancelled. I need to redirect to logout to kill the session fully as per our oidc server. Attached below screenshot

Versions

7.18.1

Screenshots

Expected

Await(revoke(AT), revoke(RT), endSession(idToken)).then (() => custom redirect);

Actual

Await(revoke(AT), revoke(RT)).then (() => custom redirect);
and endSession(idToken) is cancelled

Additional Details

PLease let me know if I am missing something

• Installed packages:

[guillaume-chervet]

Hi @pgangwani ,

Thank you for your issue.
I think it is due to the window.open. i have understand what to fix. I may do it tommorrow morning.

[pgangwani]

Hi @pgangwani ,

Thank you for your issue. I think it is due to the window.open. i have understand what to fix. I may do it tommorrow morning.

Thanks, I willl be waiting

[guillaume-chervet]

I forgot to tell you @pgangwani that version 7.18.3 should fix the bug :)

[pgangwani]

I forgot to tell you @pgangwani that version 7.18.3 should fix the bug :)

I will give it a test

[pgangwani]

@guillaume-chervet
I tested above, it is redirecting to the post_redirect_uri after logout but not to the oidc server logout page as it is happening in https://black-rock-0dc6b0d03.1.azurestaticapps.net/. Is there a setting in oidc to goto loggedout page ? I actually wanted endSession to be called and then await to be resolved so that I can manually redirect to logout of the oidc server. Thoughts?

[guillaume-chervet]

hi @pgangwani , does you oidc server support endSessionEndpoint ?

oidc-client/packages/oidc-client/src/logout.ts

Line 131 in 3a14579

if (oidcServerConfiguration.endSessionEndpoint) {

[pgangwani]

hi @pgangwani , does you oidc server support endSessionEndpoint ?

oidc-client/packages/oidc-client/src/logout.ts

Line 131 in 3a14579

if (oidcServerConfiguration.endSessionEndpoint) {

Yes it does.

[pgangwani]

I need to understand what is the extra setting required at OIDC server level ? How is your example app using duende redirecitng to duende's logout with just mention of post_redirect_uri: '/profile' ?

[guillaume-chervet]

Hi @pgangwani , some extra are defined as oidc standards and some other are specific to some oidc provider.

Do you still have some problem with logout?

[pgangwani]

provider

My problem was solved by my own hack of await logout();redirect(logoutUrl) but organically logging out like in your example. For which I raised this issue.