post logout redirect session endpoint about node-openid-client

[panva]

Hi @Johnpc123, thank you for the kind words, i'm glad the libs see more and more use.

I'd be interested in the errors you're seeing in the oidc-provider issues section. As far as the client goes - the example is written with the feature enabled in mind and so obviously (when sessionManagement gets disabled) the features have to too. The example is merely intended to showcase the API in use.

[Johnpc123]

Thanks for the prompt reply.
Currently I simply see an alert box popup in the User Agent after logging on. I'm guessing that if I turn on the debugging feature on the OP I may get some specific details.

When I get a chance I'll try that, check out the error and update.

[panva]

Hey @Johnpc123, what you're seeing is an implementation which, granted when you don't know the session management spec, features, and how to use them, is useless to you. I sincerely hope you didn't use the example as a base for your project. It is simply showing the public API in use but is NOT a complete project and does not come with essentials such as proper sessions, basic web application protection etc.

Bottom line, the alert is not an error, but merely a showcase of the session management Session Status Change Notification working.

[Johnpc123]

Thanks for the warnings Philip, I'll be sure to balance risks objectively.