Feedback-ID: i19364b5b:Fastmail
From: "Jonathan Gonzalez V." <jonathan@abdiel.eu>
To: Magnus Hagander <magnus@hagander.net>
Cc: =?utf-8?Q?=C3=81lvaro?= Herrera <alvherre@kurilemu.de>,
  pgsql-www@postgresql.org
Subject: Re: Bug during logout
In-Reply-To: 
 <CABUevEzAMw3mtW7SuZeg2sa1db2XOZnxwoSqkTuDZdwUN9--fQ@mail.gmail.com>
 (Magnus
	Hagander's message of "Tue, 18 Aug 2026 11:21:44 +0200")
References: <anrE6MKMXULuoV-L@alvherre.pgsql> <87fr0lrt89.fsf@abdiel.eu>
	<CABUevEy04ev-7at0J0h8hi-60TdNzTv6wFfdsGhjD1qLEo3WYg@mail.gmail.com>
	<87ecg52eee.fsf@abdiel.eu>
	<CABUevEzAMw3mtW7SuZeg2sa1db2XOZnxwoSqkTuDZdwUN9--fQ@mail.gmail.com>
Date: Tue, 18 Aug 2026 12:49:50 +0200
Message-ID: <87ecfvsnxt.fsf@abdiel.eu>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain
Archived-At: 
 <https://www.postgresql.org/message-id/87ecfvsnxt.fsf%40abdiel.eu>
Precedence: bulk

Hi!

Magnus Hagander <magnus@hagander.net> writes:
> ...
>
>  logging out from a website it goes in the website, but if we want to
>  have a logout control it should be in the panel that mange the session
>  of the PostgreSQL OAuth system, so that panel should have the session
>  per site, and from there it should logout other systems, so the webpage
>  logout only that, the webpage.
>
> Actually, I looked at it a bit, and the distributed logout actually uses a different endpoint. But we might want to look into that
> one as well :)

Interesting, which one? I'm guessing you mean `accounts/logout` which
has an additional `s`.

>  But now I'm curious, there's any panel that manage the session in other
>  sites like 2026.pgconf.eu, etc ? In that case, probably we can do
>  something on that side in another patch!
>
> Yes, for example https://www.postgresql.eu/account/ has a logout in bottom-left as well.

Well, this one didn't logged me out from postgresql.org, so I it's not
like a "log me out of everything" or "close my session on this site" I
was thinking more in something that show you all the sites that you're
authenticated, but I think that that it's another issue.

Regards,
--
Jonathan Gonzalez V.
EDB
https://www.enterprisedb.com