Hello,
I was wondering about the
callback endpoint and its use cases. At first I thought the callback endpoint is only used for callbacks of
login request to an IDP. But in the documentation of the
logout endpoint it is stated that it is also used for callback of
logout request. However I don't see any logic regarding logout callbacks in either the
CallbackFilter or in the
DefaultCallbackLogic of the current Pac4j Version (5.7.0). On GitHub it seems that there is now some logic added to handle logouts in the
DefaultCallbackLogic which I guess will be released with the next major update.
So I am wondering what is the intended way of implementing the callback endpoint or best practices for it? I guess handling login & logout callback request with the same endpoint is the intended way because there only needs to be one callback URL registered with the IDP. But with the current version and using the default implementations (CallbackFilter & DefaultCallbackLogic) it is only possible to handle login callbacks not logout callbacks. So at the moment one would need to implement the callback endpoint (filter) manually and determine manually if the incoming request is a login or logout callback and then execute the apropriate logic?
Thanks for the hlep in advance & kind regards,
Norman