davido/gerrit-oauth-provider

CAS - Single Log Out

piotrekfus91 opened this issue · 1 comments

piotrekfus91 commented

Hi, as far as I understand, this plugin does not support CAS logout. Expected scenario:

  1. Logged user clicks the button marked as Sign Out.
  2. User is redirected to CAS logout page.
  3. CAS logs out user and sends logout request for all services (including Gerrit) - this request is sent using server-server channel.
  4. Specific Servlet Filter handles logout in Gerrit.
    Official filter you can check here: https://github.com/apereo/java-cas-client/tree/master/cas-client-core/src/main/java/org/jasig/cas/client/session
    Is it possible to achieve in your plugin?
elupus commented

Lacking this too with new support for Auth0. Should be generally supported by a OIDC compatible IdP.