Matthieu MALVACHE 20487d56f5 fix: send id_token_hint and client_id on the OIDC end-session redirect ...

Keycloak rejects an end-session request that carries
post_logout_redirect_uri without id_token_hint or client_id. Store the
id_token from the token exchange in an httpOnly cookie, pass it as
id_token_hint together with client_id on logout, and clear it with the
refresh token.

Fixes #102

2026-08-28 02:21:16 +02:00

..

auth

fix: send id_token_hint and client_id on the OIDC end-session redirect

2026-08-28 02:21:16 +02:00

config

feat: OAuth-only mode to enforce SSO-only login

2026-03-16 13:08:40 +01:00

favicon

feat: v1.5.0 - print, archive-thread, favicon badge + avatars, ru/uk locales

2026-04-17 14:39:50 +02:00

health

feat: v1.4.0 - folder management, mail multi-selection, bug fixes

2026-03-23 15:24:46 +01:00