fedora-commops / fedora-happiness-packets

#227 Create a custom logout function
Closed: complete by jflory7. Opened by shraddhaag.

Closed: complete
Reopen Issue

Summary

Create a custom logout function

Background

When users log out, they are not logged out of OpenID Connect provider. Hence, when user's try to login again, they're not prompted for credentials.

Details

This can be solved using a custom logout function. The steps for the same are detailed here.

Outcome

  1. Users are prompted for FAS credentials when trying to re-login.
  2. Non-admin logged in users are prompted for FAS credentials to access Django Admin SIte.

Metadata Update from @jflory7:
- Issue priority set to: waiting on assignee (was: awaiting triage)

Metadata Update from @shraddhaag:
- Issue assigned to shraddhaag

Metadata Update from @jflory7:
- Issue tagged with: PASSED

I'm trying to find the documentation for logging out of the OIDC Provider(OP), in our case Ipsilion as mentioned in the Infrastructure Docs. I looked into Ipsilon documentation and the Ipsilon Infrastructure SOP and it mentions that There is not currently a logout option for ipsilon, but it is not considered an issue.

I also looked into FPDC to get an idea on how it might be configured in other Django applications in Fedora but a custom logout function to log out of OP is not configured here.

@jflory7 @skamath Could you please point me towards the right resources to implement Single Sign Out in FHP?

Metadata Update from @jflory7:
- Issue set to the milestone: Summer Coding 2019: phase 1

Metadata Update from @jflory7:
- Issue untagged with: PASSED
- Issue tagged with: needs info

I think you can call the '/logout' endpoint of ipsilon. For example in production that would be https://id.fedoraproject.org/logout.

Looking at the mozilla-django-oidc doc you might indeed need a custom function to call that url. See --> https://mozilla-django-oidc.readthedocs.io/en/stable/installation.html#log-user-out-of-the-openid-connect-provider

Metadata Update from @jflory7:
- Issue untagged with: needs info
- Issue set to the milestone: Summer Coding 2019: phase 2 (was: Summer Coding 2019: phase 1)

This was completed in #242. Closing as complete! :clapper:

Metadata Update from @jflory7:
- Issue close_status updated to: complete
- Issue status updated to: Closed (was: Open)
Metadata

bug type - backend type - summer coding

None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.