mirror of
https://github.com/go-gitea/gitea.git
synced 2026-08-01 08:20:36 +00:00
Giteabot
0d9ce64f76
Backport #38439 by @Otto-Deviant1904 Fixes #38209 OAuth2-linked accounts that sign in via the password form were still redirected to the provider end_session_endpoint on logout because the redirect was keyed off account LoginType. Store the session sign-in method (password vs oauth2) and only use RP-initiated OIDC logout when this session was authenticated via OAuth2. Sessions without the new key keep the previous LoginType behavior. Co-authored-by: Harsh Satyajit Thakur <f20240223@goa.bits-pilani.ac.in> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
18 lines
418 B
Go
18 lines
418 B
Go
// Copyright 2025 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package session
|
|
|
|
const (
|
|
KeyUID = "uid"
|
|
KeyUname = "uname"
|
|
|
|
KeyUserHasTwoFactorAuth = "userHasTwoFactorAuth"
|
|
|
|
// KeySignInMethod records how the current session was authenticated so logout
|
|
// can decide whether RP-initiated OIDC logout is appropriate.
|
|
KeySignInMethod = "signInMethod"
|
|
|
|
SignInMethodOAuth2 = "oauth2"
|
|
)
|