Keycloak reports Invalid parameter: id_token_hint during logout

[patrsc]

Sometimes (usually when the user is already logged in for a while) during logout Keycloak reports Invalid parameter: id_token_hint and does not redirect back to the application again, leaving the user at an error page where no meaningful link is shown.

Is this a bug? How could this be avoided?

[itpropro]

When the user session is expired and cannot be renewed, the user session will be locked out. The error you referenced is a hint that there is no client side id_token, but you are using a post logout redirect. Please check if you haven't accidentially overwritten the exposeIdToken with false and are still using the post logout redirect.

The next version will also change the error behavior to hide most of the errors from the user and instead clearing the session and redirecting to the login page.

[itpropro]

You can already try the new behavior in 1.0.0-beta.1.

[itpropro]

Can you confirm everything works as expected in 1.0.0-beta.3? I wasn't able to reproduce any of the keycloak issues anymore, so I will close this for now.