-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
32.0.1.Final
-
None
-
---
-
---
When a logout redirect uri is specified via LogoutDefinition
@OpenIdAuthenticationMechanismDefinition(
clientId = "${oidcConfig.clientId}",
providerURI = "${oidcConfig.providerUri}",
redirectURI = "${baseURL}/oidc/callback",
logout = @LogoutDefinition(
accessTokenExpiry = true,
notifyProvider = true,
identityTokenExpiry = true,
redirectURI = "${baseURL}/oidc/logout"
)
)
Then the logout URL is built as "org.jboss.resteasy.specimpl.ResteasyUriBuilderImpl@5396a321" since toString method of the UriBuilder is not guaranteed to return the URL. This might work in some implementations of UriBuilder but not when using the resteasy implementation.
A build() is missing to create a URI Object first.
The issue is also present in the upstream soteria project and should also be fixed there
I have already created a pull request in the soteria fork of wildfly:
https://github.com/wildfly-security/wildfly-elytron-ee/pull/34