Handling of partial success in LogoutResponse needs work
Basics
Technical
Logistics
Basics
Technical
Logistics
Description
A partial success status in a LogoutResponse is forcibly routed to the logout template, skipping/dropping any RelayState-derived URL. That may cause the local app session to be retained if the final redirect is required. That's not good practice/form, but it still happens.
Environment
None
Activity
Scott Cantor January 29, 2016 at 6:44 PM
65103184271b43bb6732c4994ae7503a44b7b3db
Unconditionally honor relay state and do redirect even on partial logout.
A partial success status in a LogoutResponse is forcibly routed to the logout template, skipping/dropping any RelayState-derived URL. That may cause the local app session to be retained if the final redirect is required. That's not good practice/form, but it still happens.