Skip to content

Commit 8315545

Browse files
rozagerardojzheaux
authored andcommitted
Update RP-Initiated Logout target URLs.
The URLs we're using are not actually pointing to the OIDC RP-Initiated Logout Specs. Fixes: gh-12081
1 parent e9db852 commit 8315545

File tree

4 files changed

+4
-6
lines changed

4 files changed

+4
-6
lines changed

docs/modules/ROOT/pages/reactive/oauth2/login/advanced.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -645,7 +645,7 @@ If more than one `ClientRegistration` is configured for OpenID Connect 1.0 Authe
645645
== OpenID Connect 1.0 Logout
646646

647647
OpenID Connect Session Management 1.0 allows the ability to log out the End-User at the Provider using the Client.
648-
One of the strategies available is https://openid.net/specs/openid-connect-session-1_0.html#RPLogout[RP-Initiated Logout].
648+
One of the strategies available is https://openid.net/specs/openid-connect-rpinitiated-1_0.html[RP-Initiated Logout].
649649

650650
If the OpenID Provider supports both Session Management and https://openid.net/specs/openid-connect-discovery-1_0.html[Discovery], the client may obtain the `end_session_endpoint` `URL` from the OpenID Provider's https://openid.net/specs/openid-connect-session-1_0.html#OPMetadata[Discovery Metadata].
651651
This can be achieved by configuring the `ClientRegistration` with the `issuer-uri`, as in the following example:

docs/modules/ROOT/pages/servlet/oauth2/login/advanced.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -838,7 +838,7 @@ If more than one `ClientRegistration` is configured for OpenID Connect 1.0 Authe
838838
== OpenID Connect 1.0 Logout
839839

840840
OpenID Connect Session Management 1.0 allows the ability to log out the End-User at the Provider using the Client.
841-
One of the strategies available is https://openid.net/specs/openid-connect-session-1_0.html#RPLogout[RP-Initiated Logout].
841+
One of the strategies available is https://openid.net/specs/openid-connect-rpinitiated-1_0.html[RP-Initiated Logout].
842842

843843
If the OpenID Provider supports both Session Management and https://openid.net/specs/openid-connect-discovery-1_0.html[Discovery], the client may obtain the `end_session_endpoint` `URL` from the OpenID Provider's https://openid.net/specs/openid-connect-session-1_0.html#OPMetadata[Discovery Metadata].
844844
This can be achieved by configuring the `ClientRegistration` with the `issuer-uri`, as in the following example:

oauth2/oauth2-client/src/main/java/org/springframework/security/oauth2/client/oidc/web/logout/OidcClientInitiatedLogoutSuccessHandler.java

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -41,8 +41,7 @@
4141
* @author Josh Cummings
4242
* @since 5.2
4343
* @see <a href=
44-
* "https://openid.net/specs/openid-connect-session-1_0.html#RPLogout">RP-Initiated
45-
* Logout</a>
44+
* "https://openid.net/specs/openid-connect-rpinitiated-1_0.html">RP-Initiated Logout</a>
4645
* @see org.springframework.security.web.authentication.logout.LogoutSuccessHandler
4746
*/
4847
public final class OidcClientInitiatedLogoutSuccessHandler extends SimpleUrlLogoutSuccessHandler {

oauth2/oauth2-client/src/main/java/org/springframework/security/oauth2/client/oidc/web/server/logout/OidcClientInitiatedServerLogoutSuccessHandler.java

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -43,8 +43,7 @@
4343
* @author Josh Cummings
4444
* @since 5.2
4545
* @see <a href=
46-
* "https://openid.net/specs/openid-connect-session-1_0.html#RPLogout">RP-Initiated
47-
* Logout</a>
46+
* "https://openid.net/specs/openid-connect-rpinitiated-1_0.html">RP-Initiated Logout</a>
4847
* @see org.springframework.security.web.server.authentication.logout.ServerLogoutSuccessHandler
4948
*/
5049
public class OidcClientInitiatedServerLogoutSuccessHandler implements ServerLogoutSuccessHandler {

0 commit comments

Comments
 (0)