openid connect - In Back-channel logout, If the logout is invalid, then RP should respond with HTTP 400 Bad request. Then how will the OP handle this? -


in openid connect back-channel logout, if logout invalid, rp should respond http 400 bad request. how op handle this?

i couldn't find in spec.

thanks in advance.

if understand saying... back-channel logout addresses op-initiated logout request. (rp-initiated logout requests in openid connect session management 1.0)

in case op has performed process of clearing "session" data , notifying rp of changed condition of "session".

i can not come possible action of op @ failure of rp cancel "session".

i assume since rp responded http 400 bad request error, should happen rp failed validate token.

i guess op keep rp in "remembered logged-in rps" list , try request again. @ point op have assume inability on part of rp.

there possibility op re-direct end-user rp in case rp need deal it.

btw: these drafts , bottom of drafts show authors' addresses can contact make suggestions.


Comments

Popular posts from this blog

Is there a better way to structure post methods in Class Based Views -

performance - Why is XCHG reg, reg a 3 micro-op instruction on modern Intel architectures? -

jquery - Responsive Navbar with Sub Navbar -