LeoVasanko/paskia
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Fix again, didn't work

Browse Source
This commit is contained in:
Leo Vasanko
2026-02-17 00:07:26 +00:00
parent 72307fb7c3
commit 5019cd13fe
1 changed files with 5 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
paskia/fastapi/oid.py
+5 -8
View File
@@ -466,22 +466,19 @@ async def userinfo(
@app.post("/backchannel-logout") @app.post("/backchannel-logout")
async def backchannel_logout( async def backchannel_logout(
request: Request, request: Request,
logout_token: str | None = Body(None, embed=False), logout_token: str = Form(...),
): ):
"""OIDC Back-Channel Logout endpoint. """OIDC Back-Channel Logout endpoint.
Receives a logout_token JWT from the RP and invalidates the session. Receives a logout_token JWT from the RP and invalidates the session.
The logout_token must contain either 'sid' (session ID) or 'sub' (user ID). The logout_token must contain either 'sid' (session ID) or 'sub' (user ID).
Per OIDC Back-Channel Logout 1.0: uses application/x-www-form-urlencoded.
""" """
# Parse form data # Validate content type
content_type = request.headers.get("content-type", "") content_type = request.headers.get("content-type", "")
if "application/x-www-form-urlencoded" in content_type: if "application/x-www-form-urlencoded" not in content_type:
form = await request.form()
logout_token = form.get("logout_token", logout_token)
if not logout_token:
return JSONResponse( return JSONResponse(
{"error": "invalid_request", "error_description": "Missing logout_token"}, {"error": "invalid_request", "error_description": "Content-Type must be application/x-www-form-urlencoded"},
status_code=400, status_code=400,
) )