openid / AppAuth-Android

Android client SDK for communicating with OAuth 2.0 and OpenID Connect providers.

Home Page:https://openid.github.io/AppAuth-Android

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Redirect after logout with Keycloak

0verEngineer opened this issue · comments

Checklist:

  • I am using the latest release
  • I searched for existing GitHub issues
  • I read the documentation
  • I verified the client configuration matches the information in the identity provider (or I am using dynamic client registration)
  • I am either using a custom URI scheme or https with App Links for client redirect.
  • I can reproduce the issue in the demo app (optional) -> not tried

Configuration

  • Version: 0.X.Y
  • Integration: (flutter_appauth)
  • Identity provider: (KeyCloack)

Issue Description

  • After using the logout endpoint through appAuth Keycloak does not show/provide any user interaction, it just logs out and then the redirect will not work because chrome will not accept it.
  • My problem is i have read in multiple issues that appAuth logout is tested and works with Keycloak so either i am doing something wrong or Keycloak can be configured to require a user interaction on logout.
    • If i hit the logout endpoint from a logged in session without any query parameters i get a logout button, but this cannot be achieved with flutter_appauth because it requires both idTokenHint and postLogoutRedirectUrl to be passed, i cannot pass postLogoutRedirectUrl alone.

Additional details:

  • login is working fine, but only if i use promptValues: ['login'],
  • i use the same custom URI scheme for logout and login

#50 Here the last comment says it works with Keycloak