feat(auth): implement OIDC RP-initiated logout and token refresh - #2827

Open

belfhi wants to merge 19 commits into

SciCatProject:masterfrom

belfhi:oidc-rp-initiated-logout

Commits on Jul 21, 2026

implement oidc RP initiated logout.
Johannes Reppin
committed
2a53eb1
implement token refresh to have valid idToken for logout.
Johannes Reppin
committed
5b27846
use userinfo endpoint for accessGroups and update on token refresh
Johannes Reppin
committed
9b0a788
address sourcery code review comments
Johannes Reppin
committed
c1e47ca
eslint fix
Johannes Reppin
committed
017cea6
add config options to enable / disable
Johannes Reppin
committed
a72b35f
refresh token setting introduced: OIDC_TOKEN_REFRESH_SECONDS_BEFORE_EXPIRY, defaults to 60s.
Johannes Reppin
committed
a115408
fix logout url
Johannes Reppin
committed
8fd2d7e
only refresh tokens while jwt & session valid
Johannes Reppin
committed
95fcbda
add new vars to example env, too
Johannes Reppin
committed
b45b206
use successUrl and returnUrl for logout
Johannes Reppin
committed
a2bb351
add additionalAuthorizedParties to auth
Johannes Reppin
committed
d243dc6
openid-client module upgrade to version 6
Johannes Reppin
committed
e2879dd
nodejs & typescript path handling
Johannes Reppin
committed
dafb173
add ssl on port 8443 to moch-oauth2-server
Johannes Reppin
committed
45b07f2
fix oauth2-mock-server config
Johannes Reppin
committed
5f1e356
allow self-signed cert for oidc issuer.
Johannes Reppin
committed
86668da
change hardcoded keycloakUrl to https and port 8443 for tests.
Johannes Reppin
committed
1fc25ca
move azp validation from OidcStrategy to OidcAuthService
Johannes Reppin
committed
2e30514