Re: [keycloak-dev] Implementation of Front-Channel Logout for OpenID Connect clients

Hi, there is this JIRA opened already [1] . We have it planned, so we want to look at it, but lack of other things caused that this wasn't prioritized in last years... Do you want to contribute the feature? BTV. There is this old discussion when we discuss the "iframes" to be used for frontchannel logout rather than redirect based approach [2]. You can see some more context by going through this old thread. I think that we already support iframe based frontchannel logout for SAML specification, or at least it is already available in Hynek's branch as mentioned in the comment of this JIRA [3]. So hopefully OIDC can re-use some parts of it. Let us know if you're interested in contributing this. [1] https://issues.jboss.org/browse/KEYCLOAK-2939 [2] http://lists.jboss.org/pipermail/keycloak-dev/2017-May/009260.htm [3] https://issues.jboss.org/browse/KEYCLOAK-5449 Marek On 10/03/2019 04:03, Diego Liberalquino wrote: > Hello, > > A thing that bothers me on Keycloak is the lack of implementation of > Front-Channel Logout for OpenID Clients. Is there any technical reason for > this or is just awaiting a community contribution? I mean, the spec is > supported for SAML clients, and it also works for external OIDC providers. > > Best regards, > Diego Liberalquino > _______________________________________________ > keycloak-dev mailing list > keycloak-dev(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-dev _______________________________________________ keycloak-dev mailing list keycloak-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-dev