Note that /logout doesn't take a body

[reivilibre]

/logout says it does not take a request body¹, so add it to the list of exceptions at the top.

I note that Complement does not send a request body for this endpoint, so that must mean Synapse and Dendrite allow that.

Preview: https://pr1644--matrix-spec-previews.netlify.app

Footnotes

1. https://spec.matrix.org/v1.8/client-server-api/#post_matrixclientv3logout ↩

[richvdh]

Hrm, this makes me sad.

I want to claim that this is misleading wording on behalf of the /logout endpoint definition, and a misfeature in complement/synapse/dendrite, rather than an indication that the body should actually allowed to be empty. Granting /logout an exception in this way very much puts it in a class of one.

On the other hand, it's clearly been this way since forever, and Element-Web relies upon it. So I guess I have to suck up the fact that there's an exception and make it something to fix for OIDC.

Anyway, /logout/all has the same problem I think.

[richvdh]

(we should file a 'Wart' issue against the spec for this)

[richvdh]

@reivilibre would you be able to update this?

[reivilibre]

Issue created at #1845 but I don't have the ability to add a Wart label

[richvdh]

Thanks!