mirror of
https://github.com/goauthentik/authentik.git
synced 2026-06-17 19:09:11 +03:00
providers/oauth: skip post logout redirect matching if none are saved on the provider (#22718)
skip post logout redirect matching if none are saved on the provider
This commit is contained in:
@@ -84,8 +84,7 @@ class EndSessionView(PolicyAccessView):
|
||||
"id_token_hint_decode_failed"
|
||||
) from None
|
||||
|
||||
# Validate post_logout_redirect_uri against registered URIs
|
||||
if request_redirect_uri:
|
||||
if request_redirect_uri and self.provider.post_logout_redirect_uris:
|
||||
# OIDC Certification: id_token_hint required with post_logout_redirect_uri
|
||||
if not id_token_hint:
|
||||
raise TokenError("invalid_request").with_cause("id_token_hint_missing")
|
||||
|
||||
Reference in New Issue
Block a user