Nikita Vakula 649ebeb120

Implements OIDC RP-Initiated Logout (#36724) ...

At logout time, if the user authenticated via OIDC, we look up the
provider's `end_session_endpoint` (already discovered by Goth from the
OIDC metadata) and redirect there with `client_id` and
`post_logout_redirect_uri`.

Non-OIDC OAuth2 providers (GitHub, GitLab, etc.) are unaffected — they
fall back to local-only logout.

Fix #14270 

---------

Signed-off-by: Nikita Vakula <nikita.vakula@alpsalpine.com>
Co-authored-by: Nikita Vakula <nikita.vakula@alpsalpine.com>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2026-03-01 06:28:26 +00:00

..

2fa.go

Deprecate RenderWithErr (#36769)

2026-02-27 12:38:44 +00:00

auth_test.go

Implements OIDC RP-Initiated Logout (#36724)

2026-03-01 06:28:26 +00:00

auth.go

Implements OIDC RP-Initiated Logout (#36724)

2026-03-01 06:28:26 +00:00

linkaccount.go

Deprecate RenderWithErr (#36769)

2026-02-27 12:38:44 +00:00

main_test.go

make writing main test easier (#27270)

2023-09-28 01:38:53 +00:00

oauth2_provider.go

Fix oauth2 s256 (#36462)

2026-01-28 06:42:07 +01:00

oauth_signin_sync.go

Add an option to automatically verify SSH keys from LDAP (#35927)

2025-12-27 12:33:08 +00:00

oauth_test.go

Remove incorrect "db.DefaultContext" usages (#35366)

2025-08-28 03:52:43 +00:00

oauth.go

Implements OIDC RP-Initiated Logout (#36724)

2026-03-01 06:28:26 +00:00

openid.go

Deprecate RenderWithErr (#36769)

2026-02-27 12:38:44 +00:00

password.go

Deprecate RenderWithErr (#36769)

2026-02-27 12:38:44 +00:00

webauthn.go

Fix link/origin referrer and login redirect (#36279)

2026-01-03 11:43:04 +08:00