News for hackers. Stuff that matters.

A comment on Why is OAuth still hard in 2023?. Parent comment

Re:Why is OAuth still hard in 2023? by grepfru_it on Wednesday April 26, 2023 @08:43PM (#35721851)
Can you elaborate on this a bit? My logout process through keycloak is through a hidden (back channel) url. As long as I hit that client url it will end the session. Applications, I find, have different behaviors. Gitea logs out the session, portainer just clears browser cookies but the session remains active

I’m using the same keycloak setup for almost 2 years now, with upgrades

[ Parent | on HN ]
Re:Why is OAuth still hard in 2023? by neurostimulant on Wednesday April 26, 2023 @10:14PM (#35722521)
I was referring to this one: https://keycloak.discourse.group/t/keycloak-redirect-uri-log...

There is a flag to restore the old behavior but it doesn't work in newer version. Strangely, an older instance of keycloak I run still uses the old behavior even after being upgraded to latest version, so this issue seems to only affect new instance only.

[ Parent | on HN ]