[NIFI-4889] Logout not working properly with OIDC

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.5.0
• Fix Version/s: 1.8.0
• Component/s: Core UI

Environment

Browser: Chrome / Firefox
Configuration of NiFi:
- SSL certificate for the server (no client auth)
- OIDC configuration including end_session_endpoint (see the link https://auth.s.orchestracities.com/auth/realms/default/.well-known/openid-configuration)

• Assignee: Unassigned
• Reporter: Federico Michele Facca
• Created: 17/Feb/18 17:12
• Updated: 16/Jul/18 14:16
• Resolved: 16/Jul/18 14:16

Description

Click on logout, i would expect to logout and getting redirect to the auth page. But given that the session is not closed on the oauth provider, i get logged in again.

I suppose the solution would be to invoke the end_session_endpoint provided in the openid discovery configuration.

Issue Links

• links to: GitHub Pull Request #2830