You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cxf.apache.org by "Oliver Wulff (JIRA)" <ji...@apache.org> on 2012/10/01 10:11:07 UTC

[jira] [Created] (FEDIZ-28) Logout capability in IDP

Oliver Wulff created FEDIZ-28:
---------------------------------

             Summary: Logout capability in IDP
                 Key: FEDIZ-28
                 URL: https://issues.apache.org/jira/browse/FEDIZ-28
             Project: CXF-Fediz
          Issue Type: Improvement
          Components: IDP
    Affects Versions: 1.0.1
            Reporter: Oliver Wulff
            Assignee: Oliver Wulff


The IDP doesn't support a way to logout a user from the IDP. This is not the Single Sign Out feature. Basically, it invalidates the session with the IDP thus a new authentication is required.

If you send an HTTP GET like
https://<machine>:<port>/fedizidp/?logout
the session is invalidated.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Resolved] (FEDIZ-28) Logout capability in IDP

Posted by "Oliver Wulff (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/FEDIZ-28?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Oliver Wulff resolved FEDIZ-28.
-------------------------------

       Resolution: Fixed
    Fix Version/s: 1.0.2
    
> Logout capability in IDP
> ------------------------
>
>                 Key: FEDIZ-28
>                 URL: https://issues.apache.org/jira/browse/FEDIZ-28
>             Project: CXF-Fediz
>          Issue Type: Improvement
>          Components: IDP
>    Affects Versions: 1.0.1
>            Reporter: Oliver Wulff
>            Assignee: Oliver Wulff
>             Fix For: 1.0.2
>
>
> The IDP doesn't support a way to logout a user from the IDP. This is not the Single Sign Out feature. Basically, it invalidates the session with the IDP thus a new authentication is required.
> If you send an HTTP GET like
> https://<machine>:<port>/fedizidp/?logout
> the session is invalidated.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Commented] (FEDIZ-28) Logout capability in IDP

Posted by "Oliver Wulff (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/FEDIZ-28?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13467088#comment-13467088 ] 

Oliver Wulff commented on FEDIZ-28:
-----------------------------------

You can configure the logout uri in the web.xml of the fedizidp:
	<filter>
		<filter-name>LogoutFilter</filter-name>
		<filter-class>org.apache.cxf.fediz.service.idp.LogoutFilter</filter-class>
		<init-param>
			<param-name>logout.uri</param-name>
			<param-value>logout</param-value>
		</init-param>
	</filter>
                
> Logout capability in IDP
> ------------------------
>
>                 Key: FEDIZ-28
>                 URL: https://issues.apache.org/jira/browse/FEDIZ-28
>             Project: CXF-Fediz
>          Issue Type: Improvement
>          Components: IDP
>    Affects Versions: 1.0.1
>            Reporter: Oliver Wulff
>            Assignee: Oliver Wulff
>
> The IDP doesn't support a way to logout a user from the IDP. This is not the Single Sign Out feature. Basically, it invalidates the session with the IDP thus a new authentication is required.
> If you send an HTTP GET like
> https://<machine>:<port>/fedizidp/?logout
> the session is invalidated.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Updated] (FEDIZ-28) Logout capability in IDP

Posted by "Oliver Wulff (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/FEDIZ-28?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Oliver Wulff updated FEDIZ-28:
------------------------------

    Issue Type: New Feature  (was: Improvement)
    
> Logout capability in IDP
> ------------------------
>
>                 Key: FEDIZ-28
>                 URL: https://issues.apache.org/jira/browse/FEDIZ-28
>             Project: CXF-Fediz
>          Issue Type: New Feature
>          Components: IDP
>    Affects Versions: 1.0.1
>            Reporter: Oliver Wulff
>            Assignee: Oliver Wulff
>             Fix For: 1.0.2
>
>
> The IDP doesn't support a way to logout a user from the IDP. This is not the Single Sign Out feature. Basically, it invalidates the session with the IDP thus a new authentication is required.
> If you send an HTTP GET like
> https://<machine>:<port>/fedizidp/?logout
> the session is invalidated.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira