You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
state :
OPTIONAL. Opaque value used by the RP to maintain state between the logout request and the callback to the endpoint specified by the post_logout_redirect_uri query parameter. If included in the logout request, the OP passes this value back to the RP using the state query parameter when redirecting the User Agent back to the RP.
There was a change in how FranceConnect redirect the user on the logout endpoint. It stopped sending the state parameter which contradicts the specs :
https://openid.net/specs/openid-connect-session-1_0.html#RPLogout
This cause keycloak to throw an unhandled exception (here : https://github.com/keycloak/keycloak/blob/01255da0f07640f63a346123179cf485aa9058e0/services/src/main/java/org/keycloak/broker/oidc/OIDCIdentityProvider.java#L105).
An issue was open with France Connect Support.
The text was updated successfully, but these errors were encountered: