Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Detail a bit more how an app should SSO-logout #2557

Draft
wants to merge 1 commit into
base: master
Choose a base branch
from
Draft

Detail a bit more how an app should SSO-logout #2557

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion ...0.packaging_apps/60.advanced/30.sso_ldap_integration/sso_ldap_integration.fr.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -76,4 +76,4 @@ Consultez la page sur les ressources de l'application pour la description compl

Un [problème connu](https://github.com/YunoHost/issues/issues/501) est que parfois, la déconnexion des applications YunoHost ne déconnectera pas les utilisateurs de chaque application. C'est par exemple le cas de [Nextcloud](https://github.com/YunoHost-Apps/nextcloud_ynh/issues/19), car il utilise ses propres cookies d'authentification qui ne sont pas effacés lorsque les gens se déconnectent de YunoHost. Ce n’est pas anodin à corriger.

De même, la déconnexion de l'application ne déconnecte pas nécessairement entièrement les personnes de YunoHost (ce qui est plus acceptable que de cliquer sur Se déconnecter et... de ne pas être déconnecté du tout car vous êtes toujours connecté sur le SSO, donc connecté sur l'application). Certaines applications YunoHost intègrent des correctifs personnalisés de sorte que le processus de déconnexion de l'application redirige automatiquement vers `https://domain.tld/yunohost/sso/?action=logout` qui les déconnecte.
De même, la déconnexion de l'application ne déconnecte pas nécessairement entièrement les personnes de YunoHost (ce qui est plus acceptable que de cliquer sur "*Se déconnecter*" et... de ne pas être déconnecté du tout car vous êtes toujours connecté sur le SSO, donc connecté sur l'application). Certaines applications YunoHost intègrent des correctifs personnalisés de sorte que le processus de déconnexion de l'application redirige automatiquement vers `https://main.domain.tld/yunohost/sso/?action=logout` qui les déconnecte (il est important que la redirection soit faite vers le [domaine principal](https://doc.yunohost.org/fr/dev/maindomain) pour fonctionner).
2 changes: 1 addition & 1 deletion ...e/10.packaging_apps/60.advanced/30.sso_ldap_integration/sso_ldap_integration.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -93,4 +93,4 @@ See the page about app resources for the full description of behavior and proper

A common [known issue](https://github.com/YunoHost/issues/issues/501) is that sometimes, logging out of YunoHost apps will not log people out of every app. This is for example the case for [Nextcloud](https://github.com/YunoHost-Apps/nextcloud_ynh/issues/19), because it uses its own authentication cookies which are not cleared when people log out of YunoHost. This is not trivial to fix.

Similarly, logging out of the app doesn't necessarily log people from YunoHost entirely (which is more acceptable that clicking Log out and... not being logged out at all because you're still logged-in on the SSO, hence logged in on the app). Some YunoHost app do integrate custom patches such that the logout process of the app does automatically redirects to `https://domain.tld/yunohost/sso/?action=logout` which logs them out.
Similarly, logging out of the app doesn't necessarily log people from YunoHost entirely (which is more acceptable that clicking "*Log out*" and... not being logged out at all because you're still logged-in on the SSO, hence logged in on the app). Some YunoHost app do integrate custom patches such that the logout process of the app does automatically redirects to `https://main.domain.tld/yunohost/sso/?action=logout` which logs them out (it is important that the redirection is made to the [main domain](https://doc.yunohost.org/en/dev/maindomain) to work).