Back-Channel Logout

MrNavaStar commented

2026-03-02 15:38:15 -06:00

(Migrated from github.com)

As far as I can tell, the OIDC Back-Channel Logout Spec has not been implemented yet.

This feature would allow VoidAuth to notify compatible clients that a user has logged out, which prevents the issue of being logged out of VoidAuth while still being logged into client services.

It also appears that our oidc library does implement the spec, so I would guess this is probably as simple as some config options and a function call in the logout callback.

As far as I can tell, the [OIDC Back-Channel Logout Spec](https://openid.net/specs/openid-connect-backchannel-1_0.html) has not been implemented yet. This feature would allow VoidAuth to notify compatible clients that a user has logged out, which prevents the issue of being logged out of VoidAuth while still being logged into client services. It also appears that our oidc library [does implement](https://www.npmjs.com/package/oidc-provider#implemented-specs--features) the spec, so I would guess this is probably as simple as some config options and a function call in the logout callback.

notquitenothing commented

2026-03-03 21:55:51 -06:00

(Migrated from github.com)

I agree that adding this functionality should be simple as node-oidc-provider should be handling all the difficult logic. Do you have a client application in mind that could actually make use of this? If not or don't want to share details that is ok too

MrNavaStar commented

2026-03-04 01:40:44 -06:00

(Migrated from github.com)

There is currently a pr open for Immich, and if we add support for this then I will probably open a PR for NextExplorer

https://github.com/immich-app/immich/pull/26235

There is currently a pr open for Immich, and if we add support for this then I will probably open a PR for NextExplorer https://github.com/immich-app/immich/pull/26235

notquitenothing commented

2026-04-05 17:00:57 -05:00

(Migrated from github.com)

I am interested in adding this, but do not know of any existing project to test against. If you know of any, let me know.

👍 2

MrNavaStar commented

2026-05-21 04:57:12 -05:00

(Migrated from github.com)

Back channel logout has been merged into Immich

🎉 1

Rows
Columns

Back-Channel Logout #316