keycloak/keycloak

Produce 'Logout' event in event listener provider when 'SSO Session Max' is reached

Aberta

#40.403 aberto em 11 de jun. de 2025

 (6 comentários) (0 reação) (0 responsável)Java (8.346 forks)batch import
area/authenticationhelp wantedkind/enhancementteam/core-clients

Métricas do repositório

Stars
 (34.398 estrelas)
Métricas de merge de PR
 (Métricas PR pendentes)

Description

Description

We'd like to get a `Logout' event in the event listener provider when 'SSO Session Max' is reached so that the app can react to this Keycloak session expiration properly.

Currently we don't get this event.

Discussion

No response

Motivation

For example a Spring Security app with Standard flow executes authentication in Keycloak just during logging in (see https://github.com/spring-projects/spring-security/issues/6742) so it heavily relies on the logout events from Keycloak to be able to invalidate the local authentication session.

We have a custom extension that implements org.keycloak.events.EventListenerProviderFactory and listens to Events (of type LOGOUT) and Admin events (of type DELETE/USER_SESSION) and neither of them fires in case of SSO Session Max expiration

Details

No response

Guia do colaborador