Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Security] Add target_path_parameter, use_referer, etc options to logout listener #10047

Closed
Koc opened this issue Jan 17, 2014 · 5 comments
Closed

Comments

@Koc
Copy link
Contributor

Koc commented Jan 17, 2014

We are using crossdomain authentication (site1.com - authentication server, site2.com - dependent site). And after logout from dependent site we fine oneself on authentication server.

@Koc
Copy link
Contributor Author

Koc commented Jan 17, 2014

Currently I'm using workaround for this Koc/BrouzieCrossdomainAuthBundle@1702d8f but IMHO this should be in core

@lyrixx
Copy link
Member

lyrixx commented Jan 18, 2014

+1. I have this need too. ping @fabpot

@Pym
Copy link

Pym commented Feb 25, 2014

👍

@curry684
Copy link
Contributor

curry684 commented Apr 6, 2019

Should we still consider this relevant in 2019? The scenario you describe with authentication servers is standardized with OAuth2 these days, and that wouldn't cause these issues. So I'm not really sure we have a need to disclose this any more, and as shown in #23599 it's not quite trivial to adapt.

@chalasr
Copy link
Member

chalasr commented Apr 6, 2019

I'm going to close this issue as it's 5 years old and it didn't bring much reactions from the community. You can still write your own logout_success_handler to solve this on your end.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

6 participants