Jonathan Perret

Results 42 comments of Jonathan Perret

> Thanks for bringing up this issue. I'm on a short trip right now, but will look into this next week. Documenting this behavior is one thing, but I think...

Note that while it's true that the OIDC spec prohibits using wildcards when specifying allowed `post_logout_redirect_uri`s, it seems common for them to be allowed, e.g. Keycloak lets you do it...