Kovah/LinkAce

SSO: trigger invalidation after user logout via LinkAce

Open

#907 opened on Feb 11, 2025

View on GitHub
 (0 comments) (0 reactions) (0 assignees)PHP (1,761 stars) (111 forks)batch import
EnhancementHelp wanted

Description

Discussed in https://github.com/Kovah/LinkAce/discussions/903

Originally posted by caplam February 11, 2025 ...

I have one problem yet : when logging out linkace the browser stays on linkace logging page instead of launching invalidation flow in authentik.

I used this post to debug my setup while writing it. I hope it will be useful to someone trying to setup authentik for linkace.

Authentik example: https://docs.goauthentik.io/docs/add-secure-apps/flows-stages/flow/examples/default_flows

Contributor guide

Tech stack
phplaravelrest api
Domain
authenticationsecuritybackend
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
3-5 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
fresh
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
Understanding of SSO and OIDCFamiliarity with LinkAce logout flowBasic knowledge of Authentik
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
40
Research direction
Examine the current logout implementation in LinkAce (likely in the AuthController or a dedicated service) to understand how the logout is triggered. Review the discussion #903 for specific user expectations and the Authentik documentation on default logout flows. Identify where a request to Authentik's logout endpoint should be added. Check if there is any existing SSO integration code or configuration for external providers. The goal is to determine the minimal changes needed to trigger an invalidation request upon user logout.