SaveTokens和PostLogoutRedirectUris之間有任何關係嗎？

Question

如果savetokens設置爲falsePostLogoutRedirectUris不起作用。這兩者之間的關係是什麼？我identityserver4 1.1使用與asp.net 1.1核心

app.UseOpenIdConnectAuthentication(new OpenIdConnectOptions 
{ 
    RequireHttpsMetadata = false, 
    ClientId = "openIdConnectClient", 
    AuthenticationScheme = "oidc", 
    Authority = "https://localhost:44309/", 
    SignInScheme = "Cookies", 
    Scope = { "email" }, 
    SaveTokens = true 
}); 


new Client 
{ 
    ClientId = "openIdConnectClient", 
    ClientName = "Example Implicit Client Application", 
    AllowedGrantTypes = GrantTypes.Implicit, 
    AllowedScopes = new List<string> 
    { 
     IdentityServerConstants.StandardScopes.OpenId, 
     IdentityServerConstants.StandardScopes.Profile, 
     IdentityServerConstants.StandardScopes.Email, 
    }, 
    RedirectUris = new List<string> 
    {  
     "https://localhost:44378/signin-oidc" 
    }, 
      PostLogoutRedirectUris = new List<string> 
    { 
     "https://localhost:44378/signout-callback-oidc" 
    }, 

    } 

Answer 1

如果檢查註銷規格

https://openid.net/specs/openid-connect-session-1_0.html#RedirectionAfterLogout

，你會發現，該id_token需要在退出時間要能夠重定向回到客戶端應用程序。

SaveTokens爲您準確完成 - 它將令牌存儲在cookie中並在註銷時將其發送回OP。