Make logout redirect URL configurable through environment variable #708
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Currently, when using OpenID-Connect for authentication, logging out does not redirect to the authentication provider. Hence, the user is not actually logged out. On page reload the user is directly logged in again as the cookie still exists.
In some cases this might be desired behaviour, but I assume more often than not it is expected to log out the user at the external auth provider. This can be easily achieved though by manually setting the
ACCOUNT_LOGOUT_REDIRECT_URLvalue to the absolute URL of the auth provider logout endpoint. Example for Keycloak:Ideally, django-allauth would parse and use this endpoint automatically from the OpenID discovery endpoint, but this doesn't seem to be implemented right now. see https://codeberg.org/allauth/django-allauth/issues/3104