OpenID Logout error

By: Antanas Sakalauskas user 07 Mar 2016 at 2:16 a.m. CST

4 Responses
Antanas Sakalauskas gravatar
Dear Michael, We have upgraded Gluu to 2.4.1-1, but still logout does not work. The following should terminate session and redirect to google.com: https://gluu-server.com/fakeurl?logout=https%3A%2F%2Fwww.google.com But we are getting back {"error":"invalid_grant","error_description":"The provided access token is invalid, or was issued to another client."} from https://gluu-server.com/oxauth/seam/resource/restv1/oxauth/end_session The token id is being provided as you can see below: id_token_hint=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjBjNzJmZTJlLTA3NWQtNDk1Yi1hZDBiLTljYmY1YWFjZjA1YyJ9.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.dUkFY2hvV7o_5nlSTjw1xY-pqUBTrdR3lK-qyyqUJZ0m7mnpUUrEd7An_yxkMkkHXwrWZGISES5NimFiO5SMlb8TPKrtq3u0t9VAiBdy044mtwKdGdzHOR5YumEi3Y9a_yJjk2QBJfuOQLOk2O1AHYCAESrErpKcbo28oNWMkcJNNMAbCiVgSziSSbWrVNA2xsQ4uFzPTknj10_-mMx82rq3tjl2Dt23_rcSPMVfUB4gSZ-t_dM5ofSfV6M0rU70BIqp5rzSXpbp5JHOfQP4XSi3Gys4uvPs600pb4zbm9K8NGTFhmgazWtcBYQ0kfHuIO03fqZBb3iiZYN7n55eSw&post_logout_redirect_uri=http%3A%2F%2Fwww.google.com
None
closed

Answers

By Mohib Zico Account Admin 07 Mar 2016 at 2:32 a.m. CST

Copy
Mohib Zico gravatar
Antanas, 2.4.2 is the latest one. Please upgrade to 2.4.2 and create a new ticket if you face any issue.

By Yuriy Zabrovarnyy staff 07 Mar 2016 at 3:46 a.m. CST

Copy
Yuriy Zabrovarnyy gravatar
Antanas, It seems that id_token you've provided for id_token_hint is invalid, at least it didn't pass validation. According to error I can say that token does not exist at the server at the time when you call /end_session endpoint.

By Antanas Sakalauskas user 07 Mar 2016 at 3:53 a.m. CST

Copy
Antanas Sakalauskas gravatar
Yuriy, We got id_token after successful OpenID authentication with Gluu server, so the token_id we provided must be correct. Regards, Antanas

By Theodore Sands user 07 Oct 2016 at 12:45 p.m. CDT

Copy
Theodore Sands gravatar
Make sure you have added the needed Redirect Logout URI in the Client's registration in Gluu.

Post an answer