Results 68 comments of Joe DeCock
trafficstars

I'm really heartened to see this epic, because in my work on IdentityServer, the by far most common support topic is data protection. The problems that I see are all...

@miaooss, if necessary, you can also [open an IdentityServer issue](https://github.com/DuendeSoftware/Support/issues/new/choose).

What's the use case that we're trying to support with this change? Why would the authority's url change dynamically, and how often does that change occur? Why not create a...

@velocitysystems - can you help me understand the goal of this proposed change? > What's the use case that we're trying to support with this change? Why would the authority's...

No problem, and thanks for letting us know! It sounds like an interesting problem, and I think your approach is the one we'd recommend.

If you're using OIDC, you may also want to take a look at IdentityModel.OidcClient. It has a higher level abstraction for handling the authorize redirect and the client side state...

Would help with a variety of issues, e.g., https://github.com/DuendeSoftware/Support/issues/1215

@brockallen and @leastprivilege , what do you think of this? I can't think of any situation where the end session endpoint would be called in an iframe.