Repository navigation
Implement 'Cache-Control: no-store' on '/logout' endpoint #38871
moritzschmitz-oviva
started this conversation in
Feedback
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Since user information is stored unencrypted in the
id_token_hintquery parameter when calling the '/logout' endpoint, I believe it is good practice to tell browsers to not cache the response.All reactions