Skip to content

v1.6.10

Choose a tag to compare

@mastacontrola mastacontrola released this 18 Aug 12:34
· 1 commit to main since this release
f82114e

OIDC: after a successful single logout, land on FOG's ordinary login page (#20).

With Single Logout and Redirect Login To This Provider both on, signing out left you on the break-glass page (management/login.php) instead of the normal login page. Single logout is precisely the case where the provider session has been ended, so returning to the redirecting page is correct — the provider then asks who you are, and signing out and back in as somebody else is one continuous journey.

⚠️ If you enabled Single Logout on v1.6.9, re-register the post-logout redirect URI at your provider. It changes from …/management/login.php to …/management/index.php. Providers that follow the spec refuse an unregistered value and show their own error page instead of returning to FOG. The value is printed on the provider's page in FOG.

Unchanged: a failed sign-in, and logging out with Single Logout off while the redirect is on, both still land on management/login.php — in those cases the provider session is untouched, so returning to it would loop or silently sign you back in.

Requires core with FOGProject/fogproject#1174 and #1175.