You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@nifi.apache.org by "David Handermann (Jira)" <ji...@apache.org> on 2022/11/16 14:37:00 UTC

[jira] [Resolved] (NIFI-10827) OIDC Logout Doesn't Work

     [ https://issues.apache.org/jira/browse/NIFI-10827?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Handermann resolved NIFI-10827.
-------------------------------------
    Fix Version/s: 1.19.0
         Assignee: Nathan Gough
       Resolution: Fixed

Thanks for reporting this issue [~ruckc]. NIFI-10332 describes the same issue, and was just recently fixed, so the resolution will be included in upcoming releases.

> OIDC Logout Doesn't Work
> ------------------------
>
>                 Key: NIFI-10827
>                 URL: https://issues.apache.org/jira/browse/NIFI-10827
>             Project: Apache NiFi
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 1.18.0
>            Reporter: Curtis W Ruck
>            Assignee: Nathan Gough
>            Priority: Major
>             Fix For: 1.19.0
>
>         Attachments: openid-configuration.json
>
>
> With keycloak 20, nifi 1.18.0, logouts don't succeed.  This results in a failure to logout.
> The keycloak error is `Missing parameters: id_token_hint` and it appears to not be getting the EndSessionEndpoint in [OIDCAccessResource:360-370|https://github.com/apache/nifi/blob/rel/nifi-1.18.0/nifi-nar-bundles/nifi-framework-bundle/nifi-framework/nifi-web/nifi-web-api/src/main/java/org/apache/nifi/web/api/OIDCAccessResource.java#L360-L370].  The attached configuration is what is provided to nifi.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)