21021: Send logout requests to the issuing cluster in a federation
authorBrett Smith <brett.smith@curii.com>
Wed, 8 Nov 2023 03:43:42 +0000 (22:43 -0500)
committerBrett Smith <brett.smith@curii.com>
Wed, 8 Nov 2023 19:16:07 +0000 (14:16 -0500)
commitd719195a223a00b1f7706f4f734e0cd59618e54e
tree14a90397bcc1f5d3df167a130f2bc1c8058a5a0c
parentac312e0acae4fd114114081c9f4791d05e640831
21021: Send logout requests to the issuing cluster in a federation

User agents may not follow the redirect sent by the previous
implementation, meaning the logout process never really completes: the
token gets deleted locally, but then can be revived when it gets
re-checked against the issuing cluster. Address this by having the local
controller make a logout request to the issuing cluster directly.

Arvados-DCO-1.1-Signed-off-by: Brett Smith <brett.smith@curii.com>
lib/controller/federation/conn.go
lib/controller/federation/login_test.go
lib/controller/federation/logout_test.go [new file with mode: 0644]