nginx-openid-connect/nginx-oidc-azure-ad

IdP end_session_endpoint

shawnhankim opened this issue · 0 comments

Background:

  • https://openid.net/specs/openid-connect-session-1_0-17.html
  • In 2.1. OpenID Provider Discovery Metadata, end_session_endpoint is required field.
  • Currently, the name is called as $oidc_logout_endpoint in NGINX Plus OIDC.
  • Hence, it needs to be replaced with end_session_endpoint to be consistent name with the OIDC specification to prevent any confusion.

AC:

  • Replace $oidc_logout_endpoint with $oidc_session_end_point.