[keycloak-dev] openid connect logout is weird
Bill Burke
bburke at redhat.com
Wed Feb 5 09:11:01 EST 2014
http://openid.net/specs/openid-connect-session-1_0.html
They set up invisible iframes so that an app can query the auth server's
iframe to check to see if the login cookie is still set. Doesn't that
seem weird?
Was kind of hoping for a REST interface back to the application like we
currently have.
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
More information about the keycloak-dev
mailing list