Remove OIDC logout to ensure SSO session consists

heviat · Aug 2, 2023 · efa659b · efa659b
1 parent be9df8e
commit efa659b
Showing 1 changed file with 7 additions and 7 deletions.
diff --git a/core/admin/mailu/sso/views/base.py b/core/admin/mailu/sso/views/base.py
@@ -96,13 +96,13 @@ def login():
 @sso.route('/logout', methods=['GET'])
 @access.authenticated
 def logout():
-    if utils.oic_client.is_enabled():
-        if 'openid_token' not in flask.session:
-            return logout_legacy()
-        if 'state' in flask.request.args and 'state' in flask.session:
-            if flask.request.args.get('state') == flask.session['state']:
-                return logout_legacy()
-        return redirect(utils.oic_client.logout(flask.session['openid_id_token']))
+    #if utils.oic_client.is_enabled():
+    #    if 'openid_token' not in flask.session:
+    #        return logout_legacy()
+    #    if 'state' in flask.request.args and 'state' in flask.session:
+    #        if flask.request.args.get('state') == flask.session['state']:
+    #            return logout_legacy()
+    #    return redirect(utils.oic_client.logout(flask.session['openid_id_token']))
     return logout_legacy()
 
 @sso.route('/backchannel-logout', methods=['POST'])