Clicking Logout returned 405: the base templates linked to the logout view with a GET, which mozilla-django-oidc refuses. Both portals now post a CSRF form instead. A POST alone was not enough. OIDC_OP_LOGOUT_URL_METHOD is now set, so logout builds the realm's RP-initiated end-session URL with the stored id token and a registered post-logout redirect. Without it Keycloak kept its session and silently signed the user back in, so the sign-in screen could never be reached again on that browser. Registered the post-logout redirect URIs on the ixg-platform client and trimmed its redirect URIs to the callback on the hosts that actually serve the platform. |
||
|---|---|---|
| .. | ||
| base_portal.html | ||
| batch_detail.html | ||
| batch_list.html | ||
| chat.html | ||
| chat_embed.html | ||
| compliance.html | ||
| dashboard.html | ||
| document_list.html | ||
| signup.html | ||
| subscription.html | ||