Skip to content

providers/oauth2: fix logout token missing sid, fix wrong sub mode used#16295

Merged
rissson merged 1 commit intomainfrom
fix-oidc-backchannel-missing-sid
Aug 21, 2025
Merged

providers/oauth2: fix logout token missing sid, fix wrong sub mode used#16295
rissson merged 1 commit intomainfrom
fix-oidc-backchannel-missing-sid

Conversation

@rissson
Copy link
Member

@rissson rissson commented Aug 21, 2025

Details

Closes #16294


Checklist

  • Local tests pass (ak test authentik/)
  • The code has been formatted (make lint-fix)

If an API change has been made

  • The API schema has been updated (make gen-build)

If changes to the frontend have been made

  • The code has been formatted (make web)

If applicable

  • The documentation has been updated
  • The documentation has been formatted (make docs)

Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
@rissson rissson requested a review from a team as a code owner August 21, 2025 12:06
@netlify
Copy link

netlify bot commented Aug 21, 2025

Deploy Preview for authentik-docs ready!

Name Link
🔨 Latest commit 2ec45fb
🔍 Latest deploy log https://app.netlify.com/projects/authentik-docs/deploys/68a70bb33f7a560008cfed76
😎 Deploy Preview https://deploy-preview-16295--authentik-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify
Copy link

netlify bot commented Aug 21, 2025

Deploy Preview for authentik-storybook canceled.

Name Link
🔨 Latest commit 2ec45fb
🔍 Latest deploy log https://app.netlify.com/projects/authentik-storybook/deploys/68a70bb3a932fe0008bd952a

@netlify
Copy link

netlify bot commented Aug 21, 2025

Deploy Preview for authentik-integrations canceled.

Name Link
🔨 Latest commit 2ec45fb
🔍 Latest deploy log https://app.netlify.com/projects/authentik-integrations/deploys/68a70bb30031fb000890c63f

@codecov
Copy link

codecov bot commented Aug 21, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.73%. Comparing base (11c9015) to head (2ec45fb).
⚠️ Report is 4 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff             @@
##             main   #16295      +/-   ##
==========================================
- Coverage   92.78%   92.73%   -0.06%     
==========================================
  Files         837      837              
  Lines       45254    45254              
==========================================
- Hits        41988    41965      -23     
- Misses       3266     3289      +23     
Flag Coverage Δ
e2e 46.63% <100.00%> (+0.02%) ⬆️
integration 23.49% <25.00%> (-0.06%) ⬇️
unit 90.93% <100.00%> (+<0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@github-actions
Copy link
Contributor

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-2ec45fbfdf5229bc5437fb7c8ae1d1fab4488c53
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-2ec45fbfdf5229bc5437fb7c8ae1d1fab4488c53

Afterwards, run the upgrade commands from the latest release notes.

@rissson rissson enabled auto-merge (squash) August 21, 2025 13:03
@rissson rissson merged commit b893305 into main Aug 21, 2025
156 of 158 checks passed
@rissson rissson deleted the fix-oidc-backchannel-missing-sid branch August 21, 2025 13:43
rissson added a commit that referenced this pull request Aug 21, 2025
…ed (cherry-pick #16295) (#16299)

fix logout token missing sid, fix wrong sub mode used (#16295)
kensternberg-authentik added a commit that referenced this pull request Aug 26, 2025
* main: (210 commits)
  web: Username truncation, field alignment. (#16283)
  website/docs: adds a webhook header mapping example (#16301)
  web: Fix issue where form group uses unknown slot. (#16276)
  lifecycle: set PROMETHEUS_MULTIPROC_DIR as early as possible (#16298)
  providers/oauth2: fix logout token missing sid, fix wrong sub mode used (#16295)
  web: bump core-js from 3.45.0 to 3.45.1 in /web (#16290)
  root: Remove CODEOWNERS entries from docs/ directory (#16287)
  *: Fix dead doc link (#16288)
  web: saml provider view: fix state refresh issues (#14474)
  web: fix "Explore integrations" link in Quick actions (#16274)
  website/integrations: fix dead links to external docs (#16273)
  tasks: add rel_obj to system task exception event (#16270)
  website/docs: update 2025.8 release notes (#16269)
  web: bump @patternfly/elements from 4.1.0 to 4.2.0 in /web (#16265)
  web: bump mermaid from 11.9.0 to 11.10.0 in /web (#16263)
  web: bump @types/guacamole-common-js from 1.5.3 to 1.5.4 in /web (#16262)
  security: Bump supported versions (#16261)
  core: bump channels from 4.3.0 to v4.3.1 (#16260)
  translate: Updates for file web/xliff/en.xlf in cs_CZ (#16264)
  website: bump the eslint group in /website with 3 updates (#16248)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

OAuth2/OpenID back-channel logout SID

2 participants