Skip to content

Logout public/internal#168

Open
constantine2nd wants to merge 4 commits into
OpenBankProject:developfrom
constantine2nd:develop
Open

Logout public/internal#168
constantine2nd wants to merge 4 commits into
OpenBankProject:developfrom
constantine2nd:develop

Conversation

@constantine2nd
Copy link
Copy Markdown
Collaborator

No description provided.

Previously defaulted to OBPv6.0.0.  Updated VITE_OBP_API_DEFAULT_RESOURCE_DOC_VERSION
in .env.example and the in-code fallback in src/obp/index.ts.

Infrastructure API calls (entitlements, api-collections, consents, resource-docs fetch)
are pinned in shared-constants.ts and are unaffected.
Add VITE_OBP_LOGOUT_MODE to control GET /user/logoff behaviour:

- public (default): clear the local session, then redirect to the OIDC
  provider's end_session_endpoint (RP-initiated SSO logout) so the
  Keycloak/OIDC session is also ended. Falls back to a local redirect when
  the provider, end_session_endpoint, or id_token is unavailable.
- internal: local-only logout, leaving the provider SSO session intact for
  silent re-login. Unrecognised values warn and default to public.

Adds getEndSessionEndpoint() to OAuth2ClientWithConfig and the supporting
oauth2 type. Documented in README and .env.example.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant