post_logout_redirect_uri must need id_token_hint?

[webB1an]

Hello!

I'm trying to implement the logout flow by RP.

I find post_logout_redirect_uri need use with id_token_hint ,but the way of RP don't have id_token_hint.

How to redirected to custom post_logout_redirect_uri after call /oauth2/sessions/logout without id_token_hint?

[leapit]

the similar issue I found,below logs

time=2021-10-12T03:44:37Z level=error msg=An error occurred audience=application error=map[debug: message:invalid_request reason:Logout failed because query parameter post_logout_redirect_uri is not a whitelisted as a post_logout_redirect_uri for the client. status:Bad Request status_code:400] http_request=map[headers:map[accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9 accept-encoding:gzip, deflate, br accept-language:zh-CN,zh;q=0.9,en;q=0.8 connection:upgrade cookie:Value is sensitive and has been redacted. To see the value set config key "log.leak_sensitive_values = true" or environment variable "LOG_LEAK_SENSITIVE_VALUES=true". referer:http://localhost:5555/ sec-ch-ua:"Chromium";v="94", "Google Chrome";v="94", ";Not A Brand";v="99" sec-ch-ua-mobile:?0 sec-ch-ua-platform:"macOS" sec-fetch-dest:document sec-fetch-mode:navigate sec-fetch-site:cross-site sec-fetch-user:?1 upgrade-insecure-requests:1 user-agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36 x-forwarded-for:115.220.226.211, 172.18.0.3 x-forwarded-port:443 x-forwarded-proto:http x-forwarded-ssl:on x-real-ip:172.18.0.3] host:passport.aimcheap.com method:GET path:/oauth2/sessions/logout query:Value is sensitive and has been redacted. To see the value set config key "log.leak_sensitive_values = true" or environment variable "LOG_LEAK_SENSITIVE_VALUES=true". remote:172.19.0.1:53994 scheme:http]

Where this post_logout_redirect_uri should be set,why hydra show post_logout_redirect_uri is not a whitelisted

[vinckr]

Check out the Common Problems documentation: https://www.ory.sh/docs/hydra/debug#redirect-url-isnt-whitelisted

I will mark this as answered for now, but feel free to come back to the discussion any time.

Thanks a ton! 🐝