NUKIB
OIDC Logout URL
Hello everyone
I am evaluating dockerized MISP for the past few weeks in conjunction with Keycloak for OIDC.
Using MISP/misp-docker I have been able to provide a logout url for OIDC using their OIDC_LOGOUT_URL environment variable for successful logout and redirect to login page.
Their script part
In my case I used something along
OIDC_LOGOUT_URL=https://..../realms/{myrealm}/protocol/openid-connect/logout?client_id={myclient}
(Keycloak is unhappy if not specifying the client_id)
I noticed that for your docker image it is currently hardcoded inside the config.php template.
After clicking Logout in MISP I end up with 400 error on a Keycloak page:
Clicking Back to Application then leads me to the original Keycloak login webpage for MISP.
And as mentioned in your OIDC docs - Caveats the user is still logged into Keycloak.
May I suggest to provide a new environment variable like OIDC_LOGOUT_URL to allow overriding the current setting?
This would improve OIDC interaction and provide true logout capability for it.
Kind regards
