mirror of
https://github.com/root-fr/jmap-webmail.git
synced 2026-09-22 16:01:12 +00:00
Keycloak rejects an end-session request that carries post_logout_redirect_uri without id_token_hint or client_id. Store the id_token from the token exchange in an httpOnly cookie, pass it as id_token_hint together with client_id on logout, and clear it with the refresh token. Fixes #102