Warpgate Logout is not ending the SSO session token with Authelia

[dcskinner]

Greetings,

I have Warpgate (0.27.3) working with Authelia (4.39.20) acting as my OIDC provider handling AD login and 2-factor. I was able to get groups working. All of that is working great.

The only piece missing is logout. Clicking the logout button on the Warpgate webpage takes me back to the Warpgate login, but it is not invalidating the Authelia web token, so when I click the SSO login again, it takes me directly back into Warpgate instead of the Authelia SSO login. If I logout of Warpgate and then manually browse to Authelia's logout page, my token is ended and then logging in to Warpgate again will take me to the SSO sign-in as expected.

I am unclear whether this is a missing feature in Warpgate, Authelia, or a misconfiguration on my part. I was hoping someone could point me in the right direction.

Thanks!

-Dennis

[Eugeny]

Do you see this dropdown menu when clicking the logout button?

If not, that means Warpgate is not detecting Authelia's SLO support

[Eugeny]

oh looks like it's not supported yet: authelia/authelia#5057

[dcskinner]

Ah, well that would explain it. Is there a way to make Warpgate load the Authelia logout page on its logout?

[Eugeny]

Unfortunately not, the OIDC provider itself has to support SLO for that to work

[dcskinner]

Looks like they are working on merging the changes for this feature: authelia/authelia#11660

Thanks again for looking into this!