Regarding the issue of logging in and logging out.

[wyhdil]

Hello, I've encountered some strange issues related to the user logout functionality. I hope you can help.

I've used the 'try-now-page' as the login module. This is supposed to trigger the user logout function, so I plan to test whether the logout feature is effective.

From the code, it can be seen that the URL redirection for the logout functionality is obtained from keycloak.createLogoutUrl().

So, I obtained the URL for logout through the console.

And then I started testing the logout functionality: I logged in normally, opened the IDE. Then, in another browser window, I entered the logout URL, which redirected to a Keycloak page.

I clicked on logout. However, when I refreshed and tried to access the previously copied IDE URL again, the route was still accessible.
This is obviously incorrect. In theory, after logging out, I shouldn't be able to open the IDE using the previously copied URL.

So, I would like to know if there is an issue with the logout functionality.Thanks!

[jfaltermeier]

Hi, the log out on the try now page only logs the user out of the Github authentication provider.
The session cookie for the IDE URL, which is handled by the oauth2-proxy, is not deleted. For our try now demo use case this is fine.

However I agree that we should create an example/documentation that shows how to implement the logout. I've created #264 for this.
The documentation for the proxy we use can be found here: https://oauth2-proxy.github.io/oauth2-proxy/docs/features/endpoints/#sign-out