<div dir="ltr">We need to define what the logout_uri responses are just like you did with img, I suppose. <div><br></div><div>Look forward to the developer feedback. <div><br></div></div></div><br><div class="gmail_quote"><div dir="ltr">2016年2月26日(金) 10:40 Mike Jones <<a href="mailto:Michael.Jones@microsoft.com">Michael.Jones@microsoft.com</a>>:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="#0563C1" vlink="#954F72">
<div>
<p class="MsoNormal"><span style="color:#1f497d">I’ve received feedback on the front-channel logout spec that it doesn’t satisfy a business/legal requirement to notify the end-user when logout fails, if the failure is detected. The -00 version of logout used
image GETs by default, which returned either a 200 or failure status code, so there was a means of signaling failures. See
<a href="http://openid.net/specs/openid-connect-logout-1_0-00.html#RPLogout" target="_blank">http://openid.net/specs/openid-connect-logout-1_0-00.html#RPLogout</a>. This was removed as a simplification in -01 in favor of always using iframes.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">A developer at Microsoft plans to prototype another possible means of reporting failures – using HTML5 postMessage and report back to us on his experience. I told him that he should do it in a way that supporting
it is optional.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">I’d be interested in other’s thoughts on this topic.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"> -- Mike<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<div>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Openid-specs-ab [mailto:<a href="mailto:openid-specs-ab-bounces@lists.openid.net" target="_blank">openid-specs-ab-bounces@lists.openid.net</a>]
<b>On Behalf Of </b>Mike Jones<br>
<b>Sent:</b> Saturday, February 20, 2016 2:58 AM<br>
<b>To:</b> <a href="mailto:openid-specs-ab@lists.openid.net" target="_blank">openid-specs-ab@lists.openid.net</a><br>
<b>Subject:</b> [Openid-specs-ab] HTTP-Based Logout renamed to Front-Channel Logout<u></u><u></u></span></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Carrying out a working group decision from a while ago, the OpenID Connect HTTP-Based Logout specification has been renamed to OpenID Connect Front-Channel Logout. It is now much parallel to the OpenID Connect Back-Channel Logout specification.
The renamed specification is available at <a href="http://openid.net/specs/openid-connect-frontchannel-1_0.html" target="_blank">
http://openid.net/specs/openid-connect-frontchannel-1_0.html</a>. “frontchannel_” prefixes were also added to the discovery and registration identifiers, again, paralleling the corresponding “backchannel_” prefixes in the Back-Channel specification.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">The three logout specifications now all reference one another and describe the relationships between them.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">The next step the working group should probably take to progress the logout specifications is to reconcile the different session identifier definitions contained in them. This renaming also helps us progress on the errata process, since
we’d decided to add the Front-Channel and Back-Channel specifications to the set of referenced related specifications.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"> -- Mike<u></u><u></u></p>
</div>
</div>
_______________________________________________<br>
Openid-specs-ab mailing list<br>
<a href="mailto:Openid-specs-ab@lists.openid.net" target="_blank">Openid-specs-ab@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-ab" rel="noreferrer" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs-ab</a><br>
</blockquote></div>