Backport backchannel logout#2407

Merged

fschade merged 15 commits intoopencloud-eu:stable-4.0from

dragonchaser:backport-backchannel-logout

Mar 2, 2026

Commits on Feb 26, 2026

add additional validation to logout token

dragonchaser
and
Michael Barz
committed
add mapping to backchannel logout for subject => sessionid
dragonchaser
committed
create mapping in cache for subject => sessionid
dragonchaser
committed
refactor deletion

committed
enhancement: finalize backchannel logout

fschade
authored and
dragonchaser
committed
enhancement: document idp side-effects

fschade
authored and
dragonchaser
committed
chore: cleanup backchannel logout pr for review

fschade
authored and
dragonchaser
committed
test: add more backchannellogout tests

fschade
authored and
dragonchaser
committed
chore: change naming

fschade
authored and
dragonchaser
committed
fix: use base64 record keys to prevent separator clashes with subjects or sessionIds that contain a dot

fschade
authored and
dragonchaser
committed
refactor: make the logout mode private

fschade
authored and
dragonchaser
committed
fix: simplify subject.session key parsing
dragonchaser
committed
fix(idp): Remove kpop dependency

rhafer
authored and
dragonchaser
committed
readd missing import
dragonchaser
committed

Commits on Mar 2, 2026

fix: send the backchannel logout event only if a session exists

fschade
authored and
dragonchaser
committed