Document OAuth logout redirect validation

[ethanpalm]

Summary

Updated the OAuth authentication documentation to reflect the new logout redirect security validation feature. The Logout URL field now validates redirects against the configured URL to prevent open redirect vulnerabilities.

Changes

• Updated deploy/authentication-setup.mdx to document that logout redirects are validated against the configured logoutUrl and only succeed on exact match, otherwise redirecting to /login

Generated from fix: resolve open redirect in client auth /logout @mayankshouche

---

Note

Updates OAuth docs in deploy/authentication-setup.mdx:

• Clarifies Logout URL behavior: logout redirects are validated to exactly match the configured logoutUrl; if not configured, users are redirected to /login. Notes that redirects use GET and no query params are appended (include any needed params directly in the URL).

^{Written by Cursor Bugbot for commit 9218d2f. This will update automatically on new commits. Configure here.}