[Openid-specs-ab] Issue #1486: Back-Channel Logout Response and the HTTP success status code (openid/connect)

Andrii Deinega issues-reply at bitbucket.org
Sun Apr 24 03:57:29 UTC 2022


New issue 1486: Back-Channel Logout Response and the HTTP success status code
https://bitbucket.org/openid/connect/issues/1486/back-channel-logout-response-and-the-http

Andrii Deinega:

The section states that

> If the logout succeeded, the RP MUST respond with HTTP 200 OK.

However, HTTP POST requests are also associated with the “creating of a new resource“ operation, and accordingly, there is a special status for that - 201 \(Created\).

Why does this specification tie to HTTP 200 OK? Is it really necessary?




More information about the Openid-specs-ab mailing list