Skip to content

v0.4.1 — IdP logout from discovery

Choose a tag to compare

@jpmanson jpmanson released this 12 Oct 13:10
· 10 commits to master since this release
cad149a

Fixed

  • Config.load_from_wellknown() now takes logout_endpoint from the discovery document's end_session_endpoint when it is not set explicitly. Before, configs that only set well_known_openid_url got a local-only logout: the IdP session stayed open and the next login was silent. Not applied when auth_service='auth0'.
uv add "easyoidc>=0.4.1"

Behaviour change

Apps that only set well_known_openid_url now redirect to the IdP on logout, so post_logout_uri must be registered as a valid post-logout redirect URI in the provider (Keycloak rejects unregistered ones). An explicit logout_endpoint in your config still takes precedence.

Full changelog: v0.4.0...v0.4.1