Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-10827

OIDC Logout Doesn't Work

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 1.18.0
    • 1.19.0
    • Security
    • None

    Description

      With keycloak 20, nifi 1.18.0, logouts don't succeed. This results in a failure to logout.

      The keycloak error is `Missing parameters: id_token_hint` and it appears to not be getting the EndSessionEndpoint in OIDCAccessResource:360-370. The attached configuration is what is provided to nifi.

      Attachments

        1. openid-configuration.json
          7 kB
          Curtis W Ruck

        Issue Links

          is fixed by

          Improvement - An improvement or enhancement to an existing feature or task. NIFI-10332 Add ID_TOKEN_LOGOUT support for general OpenID connect server, e.g. Keycloak

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              thenatog Nathan Gough
              ruckc Curtis W Ruck
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: