21137: Support RP-initiated logout with OIDC
authorBrett Smith <brett.smith@curii.com>
Fri, 17 Nov 2023 16:13:10 +0000 (11:13 -0500)
committerBrett Smith <brett.smith@curii.com>
Fri, 17 Nov 2023 16:19:16 +0000 (11:19 -0500)
commitbd471a9eadaf564fb4beafd7db995b7762942c1d
tree53baddd30f990d8f85747c271c364def06834124
parent7bc4217495b405c98ea4cad8178b8136383486cf
21137: Support RP-initiated logout with OIDC

With OIDC, logout only has a permanent effect if it is done by the
OP. If a user attempts to logout with an OIDC token, and the OP provides
an endpoint to end the session, send the user there to help them
accomplish that.

Arvados-DCO-1.1-Signed-off-by: Brett Smith <brett.smith@curii.com>
lib/controller/localdb/login_oidc.go
lib/controller/localdb/login_oidc_test.go
sdk/go/arvadostest/oidc_provider.go