gsadmin/headplane
1
0
Fork 0
mirror of https://github.com/tale/headplane.git synced 2026-08-24 19:46:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: add support for OIDC logouts

Browse Source 
Closes HP-407.
This commit is contained in:
Aarnav Tale
2026-04-26 20:28:36 -04:00
parent ac6f9e4f7e
commit b961b339bb
13 changed files with 512 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
config.example.yaml
+19
View File
@@ -185,6 +185,25 @@ integration:
# token_endpoint: ""
# userinfo_endpoint: ""
# RP-initiated logout (https://openid.net/specs/openid-connect-rpinitiated-1_0.html).
# When true, /logout redirects the user to the IdP's end_session_endpoint
# (auto-discovered or set manually below) so the upstream session is ended too.
#
# Disabled by default: the `post_logout_redirect_uri` MUST be pre-registered
# in your OIDC client configuration on the IdP. If it isn't, users will land
# on the provider's error page after logout.
# use_end_session: false
# Optional. Override the auto-discovered end_session_endpoint, or supply one
# if your provider does not advertise it via discovery.
# end_session_endpoint: ""
# Where the identity provider should redirect after RP-initiated logout.
# Most providers (Keycloak, Auth0, etc.) require this URL to be pre-registered
# in the OIDC client configuration. If unset, Headplane defaults to its own
# `<server.base_url>/admin/login?s=logout` page.
# post_logout_redirect_uri: ""
# The authentication method to use when communicating with the token endpoint.
# This is fully optional and Headplane will attempt to auto-detect the best
# method and fall back to `client_secret_basic` if unsure.