Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Support for OIDC RP-Initiated Logout

Browse Source 
Fixes: gh-5350
This commit is contained in:
Josh Cummings
2018-05-16 14:12:28 -06:00
parent 55e8df1efe
commit 248a8c030b
5 changed files with 367 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
web/src/main/java/org/springframework/security/web/authentication/AbstractAuthenticationTargetUrlRequestHandler.java
View File

@@ -1,5 +1,5 @@
/*
* Copyright 2002-2016 the original author or authors.
* Copyright 2002-2019 the original author or authors.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
@@ -80,7 +80,7 @@ public abstract class AbstractAuthenticationTargetUrlRequestHandler {
*/
protected void handle(HttpServletRequest request, HttpServletResponse response,
Authentication authentication) throws IOException, ServletException {
String targetUrl = determineTargetUrl(request, response);
String targetUrl = determineTargetUrl(request, response, authentication);
if (response.isCommitted()) {
logger.debug("Response has already been committed. Unable to redirect to "
@@ -91,6 +91,16 @@ public abstract class AbstractAuthenticationTargetUrlRequestHandler {
redirectStrategy.sendRedirect(request, response, targetUrl);
}
/**
* Builds the target URL according to the logic defined in the main class Javadoc
*
* @since 5.2
*/
protected String determineTargetUrl(HttpServletRequest request,
HttpServletResponse response, Authentication authentication) {
return determineTargetUrl(request, response);
}
/**
* Builds the target URL according to the logic defined in the main class Javadoc.
*/