Running Seafile 13 CE, we have no idtoken parameter inside the logout url, which is a hard requirement for some OIDC providers like Dex IdP, to properly build a good full logout url with "go back to application" link.
Example conceptual modification in python logout view
id_token = request.session.get('social_auth_extra_data', {}).get('id_token')
logout_url = f"https://dex.yourdomain.com/logout?id_token_hint={id_token}&post_logout_redirect_uri=https://seafile.yourdomain.com/"
in seahub_settings.py we can set some simple url like
LOGOUT_REDIRECT_URL = 'https://dex.yourdomain.com/logout'
but a good logout url would look like:
https://dex.yourdomain.com/logout?id_token_hint=AVERYLONGTOKEN&post_logout_redirect_uri=https%3A%2F%2Fseafile.yourdomain.com
that would give
Running Seafile 13 CE, we have no
idtokenparameter inside the logout url, which is a hard requirement for some OIDC providers like Dex IdP, to properly build a good full logout url with "go back to application" link.Example conceptual modification in python logout view
in
seahub_settings.pywe can set some simple url likebut a good logout url would look like:
that would give