Clarification of the callback endpoint

46 views
Skip to first unread message

Norman Lorenz

unread,
Feb 7, 2023, 11:23:59 AM2/7/23
to Pac4j users mailing list
Hello,

I was wondering about the callback endpoint and its use cases. At first I thought the callback endpoint is only used for callbacks of login request to an IDP. But in the documentation of the logout endpoint it is stated that it is also used for callback of logout request. However I don't see any logic regarding logout callbacks in either the CallbackFilter or in the DefaultCallbackLogic of the current Pac4j Version (5.7.0). On GitHub it seems that there is now some logic added to handle logouts in the DefaultCallbackLogic which I guess will be released with the next major update.

So I am wondering what is the intended way of implementing the callback endpoint or best practices for it? I guess handling login & logout callback request with the same endpoint is the intended way because there only needs to be one callback URL registered with the IDP. But with the current version and using the default implementations (CallbackFilter & DefaultCallbackLogic) it is only possible to handle login callbacks not logout callbacks. So at the moment one would need to implement the callback endpoint (filter) manually and determine manually if the incoming request is a login or logout callback and then execute the apropriate logic?

Thanks for the hlep in advance & kind regards,
Norman
Reply all
Reply to author
Forward
Message has been deleted
0 new messages