Fix logout redirect URL when clicking logout during a device grant to logout current user

[robotdan]

Fix logout redirect URL when clicking logout during a device grant to logout current user

Description

When using the device grant with the FusionAuth themed page /oauth2/device you will be shown a logout button if an SSO session already exists to provide the user an option to logout the current user before continuing.

This button uses the post_logout_redirect_uri, and upon redirect to /oauth2/device validation may fail.

Workaround

Replace the logoutLink macro found in the helpers file which is part of your theme with the following:

[#macro logoutLink redirectURI extraParameters=""]
[#local post_logout_redirect_uri = "${redirectURI}?tenantId=${(tenantId)!''}&client_id=${(client_id?url)!''}&nonce=${(nonce?url)!''}&pendingIdPLinkId=${(pendingIdPLinkId)!''}&redirect_uri=${(redirect_uri?url)!''}&response_mode=${(response_mode?url)!''}&response_type=${(response_type?url)!''}&scope=${(scope?url)!''}&state=${(state?url)!''}&timezone=${(timezone?url)!''}&metaData.device.name=${(metaData.device.name?url)!''}&metaData.device.type=${(metaData.device.type?url)!''}${(extraParameters?no_esc)!''}&code_challenge=${(code_challenge?url)!''}&code_challenge_method=${(code_challenge_method?url)!''}&user_code=${(user_code?url)!''}"/]
<a href="/oauth2/logout?tenantId=${(tenantId)!''}&client_id=${(client_id?url)!''}&post_logout_redirect_uri=${post_logout_redirect_uri}">[#t]
  [#nested/][#t]
</a>[#t]
[/#macro]

Is this a question about how to use FusionAuth? Please consider posting on the FusionAuth forum instead.

Community guidelines

All issues filed in this repository must abide by the FusionAuth community guidelines.

[robotdan]

• https://github.com/FusionAuth/fusionauth-app/commit/73fb72f3e1a9ec789c76bcd7ae691f9b6a5b438a