Github user mcgilman commented on the issue:

    https://github.com/apache/nifi/pull/2830
  
    @Trojan295 Thanks for the PR! The code looks good but I ran into an issue 
when attempting to log out. Despite being a required field in the openid spec 
[1], it appears that at least in practice [2] the `end_session_endpoint` field 
is not guaranteed to be present. I think we may need to account for this 
possibility in the logout endpoint.
    
    [1] https://openid.net/specs/openid-connect-session-1_0.html#OPMetadata
    [2] https://accounts.google.com/.well-known/openid-configuration


---

Reply via email to