Logout from yarnman logs out of oidc provider #29

New issue

Open

opened 2026-07-12 10:09:35 +00:00 by theis · 0 comments

theis commented

2026-07-12 10:09:35 +00:00

Owner

However, if you also want the reverse — clicking "Logout" in your app to log the user out of Authentik too (RP-initiated logout) — that requires:

Storing the OIDC ID token (we currently discard it after verification)
Adding the Authentik end-session endpoint to the logout flow
Redirecting the browser to {authentik_end_session_endpoint}?id_token_hint={id_token}&post_logout_redirect_uri={app_url}
That's a separate feature if you want it. Currently, your app's logout just clears the local JWT.

However, if you also want the reverse — clicking "Logout" in your app to log the user out of Authentik too (RP-initiated logout) — that requires: Storing the OIDC ID token (we currently discard it after verification) Adding the Authentik end-session endpoint to the logout flow Redirecting the browser to {authentik_end_session_endpoint}?id_token_hint={id_token}&post_logout_redirect_uri={app_url} That's a separate feature if you want it. Currently, your app's logout just clears the local JWT.

theis added the

enhancement

label

2026-07-12 10:42:39 +00:00