libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases Packages Activity Actions

Use a hidden form to do POST based logout (#34694)

Browse source 
Closes #32648

Signed-off-by: Jon Koops <jonkoops@gmail.com>
This commit is contained in:
Jon Koops 2024-11-06 14:02:30 +01:00 committed by GitHub
parent a9c3e592f3
commit b2930a4799
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 24 additions and 21 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

45
js/libs/keycloak-js/lib/keycloak.js
View file

@ -1299,30 +1299,33 @@ function Keycloak (config) {
return;
}
const logoutUrl = kc.createLogoutUrl(options);
const response = await fetch(logoutUrl, {
method: "POST",
headers: {
"Content-Type": "application/x-www-form-urlencoded"
},
body: new URLSearchParams({
id_token_hint: kc.idToken,
client_id: kc.clientId,
post_logout_redirect_uri: adapter.redirectUri(options, false)
})
});
// Create form to send POST request.
const form = document.createElement("form");
if (response.redirected) {
window.location.href = response.url;
return;
form.setAttribute("method", "POST");
form.setAttribute("action", kc.createLogoutUrl(options));
form.style.display = "none";
// Add data to form as hidden input fields.
const data = {
id_token_hint: kc.idToken,
client_id: kc.clientId,
post_logout_redirect_uri: adapter.redirectUri(options, false)
};
for (const [name, value] of Object.entries(data)) {
const input = document.createElement("input");
input.setAttribute("type", "hidden");
input.setAttribute("name", name);
input.setAttribute("value", value);
form.appendChild(input);
}
if (response.ok) {
window.location.reload();
return;
}
throw new Error("Logout failed, request returned an error code.");
// Append form to page and submit it to perform logout and redirect.
document.body.appendChild(form);
form.submit();
},
register: async function(options) {