Skip to content

Commit e2ac0c1

Browse files
Document OAuth logout redirect validation (#2906)
* Update deploy/authentication-setup.mdx Co-Authored-By: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com> * Apply suggestion from @ethanpalm --------- Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
1 parent 644b176 commit e2ac0c1

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

deploy/authentication-setup.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -101,7 +101,7 @@ Your host your documentation at `docs.foo.com` and your entire team has access t
101101
* **Additional authorization parameters** (optional): Additional query parameters to add to the initial authorization request.
102102
* **Token URL**: Your OAuth token exchange endpoint.
103103
* **Info API URL** (optional): Endpoint on your server that Mintlify calls to retrieve user info. Required for group-based access control. If omitted, the OAuth flow only verifies identity.
104-
* **Logout URL** (optional): The native logout URL for your OAuth provider. Mintlify redirects users to this URL with a `GET` request when they log out. Mintlify does not append query parameters, so include any parameters (for example, `returnTo`) directly in the URL. Configure a page to redirect users to on a successful logout.
104+
* **Logout URL** (optional): The native logout URL for your OAuth provider. When users log out, Mintlify validates the logout redirect against this configured URL for security. The redirect only succeeds if it exactly matches the configured `logoutUrl`. If you do not configure a logout URL, users redirect to `/login`. Mintlify redirects users with a `GET` request and does not append query parameters, so include any parameters (for example, `returnTo`) directly in the URL.
105105
* **Redirect URL** (optional): The URL to redirect users to after authentication.
106106
5. Click **Save changes**.
107107

0 commit comments

Comments
 (0)