Skip to content

The v1 docs follow nauthera-server's main branch and its 0.x releases on the way to 1.0, so fields and APIs can still change.

v1

Sign out and end the session

Docs version v1 (main)Nauthera is pre-1.0, in a design-partner programUpdated

An application ends a session through RP-initiated logout at /end_session. With an id_token_hint that verifies and names the signed-in user, the session ends at once and no screen shows; with nobody signed in, the browser goes straight on to the post_logout_redirect_uri. Otherwise (no hint, one that does not verify, or one for another user) the request lands on /logout to ask the user. See Sessions, Consent & Logout.

Sign out? with Sign out and Cancel
Sign out? with Sign out and CancelOpen in Storybook
Signing out: the button spins and Cancel is withdrawn
Signing out: the button spins and Cancel is withdrawnOpen in Storybook
  • Sign out ends the session. With a registered post_logout_redirect_uri the browser goes back to the application; otherwise the page confirms it, with Continue to the application's sign-in or, without one, the way back to the application.
  • Cancel keeps the session and says so.
  • A sign-out the server could not complete says the user may still be signed in, and offers it again.

Opened without an application's request, /logout is the user's own sign-out: Sign out ends the session, and Cancel is a link back to sign-in.

You're signed out, with the way back to the app
You're signed out, with the way back to the appOpen in Storybook
You're still signed in
You're still signed inOpen in Storybook
You may still be signed in, above the question asked again
You may still be signed in, above the question asked againOpen in Storybook