Use logoutRequest instead of logout

[RubenVerborgh]

nodeSolidServer/node-solid-server#835 (comment)

[kjetilk]

This is for 5.0.0, since that's when we have the other stuff refactored?

[RubenVerborgh]

It's the client; it evolves independently.

[kjetilk]

Uhm, slaps forehead

[RubenVerborgh]

@dmitrizagidulin What parameters should I call logoutRequest with? I currently just get /logout back; no OIDC parameters in there.

[dmitrizagidulin]

Excellent question. So, the logoutRequest docstring goes into detail on each parameter, but I'll summarize:

• id_token_hint (required for our workflow) - this is the serialized ID Token from the session object. It serves to authenticate the user to the logout endpoint, etc.
• post_logout_redirect_uri (optional but useful) - the url that the user gets redirected to after logout. Must be pre-registered btw (during the time of client dynamic registration).
• state (highly optional, depends on the app) - Opaque value used by the RP to maintain state between the logout request and the callback to the endpoint specified by the post_logout_redirect_uri query parameter.

Do those make sense?

[RubenVerborgh]

@dmitrizagidulin But where do I get id_token_hint from?

[dmitrizagidulin]

It’s just the ‘id_token’ from session

[RubenVerborgh]

Ok let me try that, thanks!