Skip to content

Route "/o/logout" returns 500 Internal Server Error #1280

@Polaris-d

Description

@Polaris-d

Describe the bug
When the logout request comes from an anonymous user and the ID Token is empty, clicking the Logout button will return 500 Internal Server Error

To Reproduce
In the case of not logging in, open "/o/logout" directly, make sure that the parameter id_token_hint is not carried, and then click the "Logout" button to reproduce this problem

Expected behavior
I think that when no id_token is provided and it is impossible to confirm which user the request came from, a 400 error should be returned to remind the user that we cannot perform an exit operation for him/her

Version
V2.3.0

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions