2

The example IS4 host app (LoggedOut.cshtml) uses an iframe for both front ánd back channel logout. The documentation also says that both flows are implemented via an iframe.

However, if I'm looking at the source code, I don't really understand why it must use an iframe for back channel logout. It looks possible to just do back channel logout in code, and without any iframes.

Edwin
  • 733
  • 8
  • 20
  • FYI - I did back channel logout in plain code now, without any iframe, and it just works. Create the logout_token (see IdentityServer4.Infrastructure.BackChannelLogoutClient) and post it to the client. – Edwin Apr 25 '18 at 15:00
  • the back channel logout can be used even in clients with no front channel, think in devices others than computers, tablets or smartphones. Please check this link to official identity server documentation: http://docs.identityserver.io/en/release/topics/signout.html – Sergio Navarro Pino Nov 15 '18 at 12:29

0 Answers0