[Openid-specs-ab] FW: OpenID Connect HTTP-based logout

John Bradley ve7jtb at ve7jtb.com
Wed Sep 9 00:06:34 UTC 2015

The page is going to need JS to do that.  Given that you have iframes that can load iframes you don’t want to kill it by redirecting before all the nested frames load.  

Someone who knows more than me about JS programming will have to advise on the best way to do that with some reasonable timeout for the ones that don’t load.

John B.
> On Sep 8, 2015, at 6:57 PM, Mike Jones <Michael.Jones at microsoft.com> wrote:
> Just got a good question…  How long should the OP wait when doing HTTP-based logout (doing the iframe renders) before redirecting to the post_logout_redirect_uri?  Is there HTTP state available to tell the OP when the page has finished rendering?
>                                                                 -- Mike
> From: Patrick Gleeson [mailto:patrick.gleeson at sohohouse.com <mailto:patrick.gleeson at sohohouse.com>] 
> Sent: Tuesday, September 08, 2015 6:39 AM
> To: Mike Jones
> Subject: OpenID Connect HTTP-based logout
> Dear Mike,
> I very much enjoyed reading your spec <https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fopenid.net%2fspecs%2fopenid-connect-logout-1_0.html&data=01%7c01%7cMichael.Jones%40microsoft.com%7cadd2cf5a8b354c34a74108d2b852f756%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=rV49dEI76m7I1of1KVmlwvQglIcNJMCLDWb3fZ4QEBg%3d> for a mechanism for logging out users from all RPs of an OP. If you'll forgive me for my stupidity, one aspect of the spec wasn't clear to me: When the OP renders the HTML page with all the iframes, how does it know how long to wait before it can redirect to the post_logout_redirect_uri? Would it redirect the moment the page has loaded, treating the iframe requests as fire-and-forgets? Or would it wait until the iframe has loaded to try to detect whether the logout has been successful? Or is that sort of consideration beyond the scope of the spec?
> If you have a moment I'd love to hear your response.
> Best,
> Patrick
> Patrick Gleeson  
> <image9250e8.JPG> <https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fwww.sohohousedeanstreet.com&data=01%7c01%7cMichael.Jones%40microsoft.com%7cadd2cf5a8b354c34a74108d2b852f756%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=7CgQe3YB%2f8Wzw%2bAOkxhq5QGfqJo4S1eYsgJXXjbLDbk%3d>
> Soho House Terms and Conditions apply
> _______________________________________________
> Openid-specs-ab mailing list
> Openid-specs-ab at lists.openid.net <mailto:Openid-specs-ab at lists.openid.net>
> http://lists.openid.net/mailman/listinfo/openid-specs-ab <http://lists.openid.net/mailman/listinfo/openid-specs-ab>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20150908/cf04b914/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4326 bytes
Desc: not available
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20150908/cf04b914/attachment.p7s>

More information about the Openid-specs-ab mailing list