Skip to content

fix(logout): Ensure we handle kerberos correctly - #1235

Open
CarlSchwan wants to merge 1 commit into
masterfrom
carl/logout
Open

CarlSchwan wants to merge 1 commit into
masterfrom
carl/logout

Conversation

@CarlSchwan

Copy link
Copy Markdown
Member

Where logout button doesn't make sense

Works best with nextcloud/server#64343

🤖 AI (if applicable)

  • The content of this PR was partly or fully generated using AI (N/A)

Where logout button doesn't make sense

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
@CarlSchwan
CarlSchwan requested a review from blizzz as a code owner September 15, 2026 09:55
Comment thread lib/UserBackend.php
// Without the normal login form, /login redirects straight back into SAML,
// so a local logout would be pointless.
if ($slo === '' && !$this->appConfig->getAppValueBool('general-nextcloud_login_form')) {
return '';

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe I am not seeing something, but this will still cause the same core.login.logout route, no? The server change does not, eh, change anything in this regard.

I also do not see any specific relation to Kerberos in the change.

@grnd-alt grnd-alt Sep 16, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@blizzz server pr is updated now, to hide the login button if an empty string is returned from the user backend

(kerberos relation is that kerberos doesn't provide a logout url)

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

(kerberos relation is that kerberos doesn't provide a logout url)

The logout URL is a configuration bit, a built-in SAML one does not have to provide one either.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

With a build-in SAML, we should be able to logout got the normal nextcloud login form and either login with another SAML provider or another login method

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants