`signout_path`: Does it work?

[mbana]

Hello, nice example you have but I was wondering if the signout_path path works.

I'm referring to:

https://github.com/veehaitch/envoy-oauth2-filter-google/blob/main/envoy/envoy.yaml#L42

In my case after visiting http://localhost:8080/oauth2/signout, after having logged in of course, I get redirected to http://localhost:8080/. If after attempting to do the signout and then going back to http://localhost:8080/oauth2 I can still see the upstream values, which indicates to me that it hasn't cleared the cookies.

[aabedraba]

This happens because the API does not have unprotected routes. From the Auth0 docs:

Logout issues Make the logout redirect URL an anonymous page (not protected by login) so that redirects to the logout redirect URL do not immediately trigger a login, which may confuse users.

Is there a way to have unprotected routes in Envoy when OAuth is enabled?