Skip to content
This repository has been archived by the owner on Oct 12, 2020. It is now read-only.

Modify cas logout url,use admin url in keycloak client configuration. #8

Open
wants to merge 7 commits into
base: master
Choose a base branch
from

Conversation

cnxieyang
Copy link

In keycloak client config page.we know.URL to the admin interface of the client. Set this if the client supports the adapter REST API. This REST API allows the auth server to push revocation policies and other administrative tasks. Usually this is set to the base URL of the client.

@Doccrazy
Copy link
Owner

Doccrazy commented Sep 8, 2018

Thank you for your contribution, and sorry for the late response!

Why is this change necessary? According to the CAS protocol specification:

The message is delivered or the redirection is sent to the URL presented in the service parameter of the original CAS protocol ticket request.

In the context of this plugin, the service parameter is mapped to the redirect URI of the client and logout should thus match the spec.
Can you elaborate why the current code fails for your setup? Single Logout is largely untested, so you are likely correct, but I would like to understand the reason behind this change.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants