fix: logout in case no logout url in identity provider

Author: JeromeBu

api/src/core/usecases/auth/logout.ts

@@ -24,7 +24,6 @@ export const makeInitiateLogout =
             throw new Error(`Session not found: ${sessionId}`);
         }
 
-        // Mark session as logged out immediately
         await sessionRepository.update({ ...session, loggedOutAt: new Date() });
 
         // Get logout URL from OIDC client

api/src/core/usecases/auth/oidcClient.ts

@@ -123,12 +123,14 @@ export class HttpOidcClient implements OidcClient {
 
         const userInfoAsString = responseBody.startsWith("ey") ? atob(responseBody.split(".")[1]) : responseBody;
 
+        console.log("\n \n userInfoAsString : ", userInfoAsString);
+
         return JSON.parse(userInfoAsString);
     }
 
     async logout(idToken: string | null): Promise<string> {
         if (!this.#config.end_session_endpoint) {
-            throw new Error("OIDC provider does not support logout");
+            return this.logoutRedirectUri; // in that case we skip the logout and redirect to the identity provider logout page
         }
 
         const logoutUrl = new URL(this.#config.end_session_endpoint);