Logout from idp only when end_session_endpoint

is available

Author: MarcialRosales

deps/rabbitmq_management/priv/www/js/main.js

@@ -167,7 +167,7 @@ function start_app_login () {
       });
     }
   })
-  // TODO REFACTOR: this code can be simplified
+  
   if (oauth.enabled) {
     if (has_auth_credentials()) {
       check_login();

deps/rabbitmq_management/priv/www/js/oidc-oauth/helper.js

@@ -243,11 +243,23 @@ function oauth_completeLogin() {
 
 function oauth_initiateLogout() {
   if (oauth.sp_initiated) {
-    mgr.signoutRedirect()
+    mgr.metadataService.getEndSessionEndpoint().then(endpoint => {
+      if (endpoint == undefined) {
+        // Logout only from management UI 
+        mgr.removeUser().then(res => {
+          clear_auth()
+          oauth_redirectToLogin()
+        })
+      }else {
+        // OpenId Connect RP-Initiated Logout
+        mgr.signoutRedirect()
+      }
+    })
   } else {
     go_to_authority()
   }
 }
+
 function oauth_completeLogout() {
     clear_auth()
     mgr.signoutRedirectCallback().then(_ => oauth_redirectToLogin())
@@ -265,8 +277,5 @@ function validate_openid_configuration(payload) {
   if (typeof payload.jwks_uri != 'string') {
     throw new Error("Missing jwks_uri")
   }
-  if (typeof payload.end_session_endpoint != 'string') {
-    throw new Error("Missing end_session_endpoint")
-  }
 
 }