Christophe Vila d308201803 fix(api): logout's post_logout_redirect_uri uses FrontendURL, not BackendURL ...

Same class of bug as the OIDC callback fix: handleSessionLogout redirected
Keycloak's end-session flow back to BackendURL+"/", which 404s in a
split-origin deployment (the backend serves no "/" route). Flagged as a
known-deferred question in the callback-redirect design spec; fixing it
now that it's been hit in practice.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-07-25 23:37:22 +02:00

35 KiB

Raw Blame History

View Raw