Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update asgardeo javascript SDKs to send client_id parameter with the logout request #255

Closed
Yasasr1 opened this issue Jul 24, 2024 · 1 comment

Comments

@Yasasr1
Copy link
Contributor

Yasasr1 commented Jul 24, 2024

Describe the task

Asgardeo console, my account and sample web applications send a GET request to the oidc/logout endpoint of the server to initiate logout. With this request, id_token_hint query parameter is sent which contains the previously issued ID token. Since query parameters are getting logged in log analytics workspaces, it's not ideal to send ID token as a query parmeter since it may contain PIIs.

With the epic linked below, oidc/logout endpoint is improved to support an additional parameter: client_id
This will eliminate the risk of potentially exposing PIIs. So this task is created to track the progress of updating above mentioned applications to send client_id in the logout request instead of id_token_hint

@Yasasr1 Yasasr1 added bug Something isn't working Type/Improvement and removed bug Something isn't working labels Jul 24, 2024
@Yasasr1
Copy link
Contributor Author

Yasasr1 commented Jul 24, 2024

Asgardeo SDKs were updated to utilize the new client_id parameter with the following PRs

@Yasasr1 Yasasr1 closed this as completed Jul 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant