By: Guy Parker named 09 Oct 2017 at 8:25 a.m. CDT

6 Responses
Guy Parker gravatar
Trying to use /oxauth/logout will result in an error because xmlns:f is not defined and so f:view, f:metadata and f:viewAction cannot be used

By Aliaksandr Samuseu staff 10 Oct 2017 at 12:27 p.m. CDT

Aliaksandr Samuseu gravatar
Hi, Guy. Could you elaborate a bit? Which OIDC flow do you try to implement when this happens? Usually `/oxauth/restv1/end_session` endpoint is used in case of oxAuth.

By Michael Schwartz Account Admin 10 Oct 2017 at 3:02 p.m. CDT

Michael Schwartz gravatar
You should use [OpenID Connect front channel logout ](http://openid.net/specs/openid-connect-frontchannel-1_0.html)

By Guy Parker named 11 Oct 2017 at 5:50 a.m. CDT

Guy Parker gravatar
Kind of confused. I thought the purpose of /oxauth/logout was to build the request for /oxauth/restv1/end_session So what is the intended use of /oxauth/logout?

By Aliaksandr Samuseu staff 12 Oct 2017 at 11:10 a.m. CDT

Aliaksandr Samuseu gravatar
Hi, Guy. According to dev team, it has a bit different purpose from `/end_session`. It accepts `ID_TOKEN_HINT` и `POST_LOGOUT_REDIRECT_URI`, and tries to call `executeExternalLogout()` and `getLogoutExternalUrl()` methods of custom auth script, which purpose is to handle logout from some 3rd party services. Then after user is returned back to Gluu again from that service, it redirects him to `/end_session` and flow continues normally. You may opt to check sources if you are interested to learn more about it: [https://github.com/GluuFederation/oxAuth/search?utf8=%E2%9C%93&q=getLogoutExternalUrl&type=](https://github.com/GluuFederation/oxAuth/search?utf8=%E2%9C%93&q=getLogoutExternalUrl&type=) [https://github.com/GluuFederation/oxAuth/search?utf8=%E2%9C%93&q=executeExternalLogout&type=](https://github.com/GluuFederation/oxAuth/search?utf8=%E2%9C%93&q=executeExternalLogout&type=)

By Guy Parker named 13 Oct 2017 at 5:11 a.m. CDT

Guy Parker gravatar
OK, I get it. Irrespective of if I should be using /oxauth/logout in this way or not I still think the bug is valid because a request for /oxauth/logout generates an error and logs: > 2017-10-13 09:57:20,640 ERROR [qtp2008017533-10] [org.xdi.oxauth.exception.GlobalExceptionHandler] (GlobalExceptionHandler.java:45) - Error Parsing //opt/gluu/jetty/oxauth/webapps/oxauth/logout.xhtml: Error Traced[line: 3] The prefix "f" for element "f:view" is not bound. Seems to me that the 3.1.x code is just missing: xmlns:f="http://xmlns.jcp.org/jsf/core"

By Yuriy Movchan staff 13 Oct 2017 at 12:34 p.m. CDT

Yuriy Movchan gravatar
Thank you for report. We will fix this in 3.1.2. In 3.1.1 you can put fixed logout.xhtml into: /opt/gluu/jetty/oxauth/custom/pages And restart oxauth service after that.