Nikita Vakula 649ebeb120

Implements OIDC RP-Initiated Logout (#36724) ...

At logout time, if the user authenticated via OIDC, we look up the
provider's `end_session_endpoint` (already discovered by Goth from the
OIDC metadata) and redirect there with `client_id` and
`post_logout_redirect_uri`.

Non-OIDC OAuth2 providers (GitHub, GitLab, etc.) are unaffected — they
fall back to local-only logout.

Fix #14270 

---------

Signed-off-by: Nikita Vakula <nikita.vakula@alpsalpine.com>
Co-authored-by: Nikita Vakula <nikita.vakula@alpsalpine.com>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2026-03-01 06:28:26 +00:00

..

api

Correct spelling (#36783)

2026-02-28 11:23:20 -08:00

common

Correct spelling (#36783)

2026-02-28 11:23:20 -08:00

install

Use "Enable Gravatar" but not "Disable" (#36771)

2026-02-27 16:39:26 +00:00

private

Instance-wide (global) info banner and maintenance mode (#36571)

2026-02-26 23:16:11 +08:00

utils

…

web

Implements OIDC RP-Initiated Logout (#36724)

2026-03-01 06:28:26 +00:00

init.go

Instance-wide (global) info banner and maintenance mode (#36571)

2026-02-26 23:16:11 +08:00