From 7d4365bd37d1cbbd533db7eabd03008658b270c2 Mon Sep 17 00:00:00 2001 From: frederikprijck Date: Thu, 14 Sep 2023 13:33:17 +0200 Subject: [PATCH] Add inline comments --- articles/quickstart/webapp/aspnet-owin/01-login.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/articles/quickstart/webapp/aspnet-owin/01-login.md b/articles/quickstart/webapp/aspnet-owin/01-login.md index f7853f89be..4c0d187be1 100644 --- a/articles/quickstart/webapp/aspnet-owin/01-login.md +++ b/articles/quickstart/webapp/aspnet-owin/01-login.md @@ -99,10 +99,14 @@ public void Configuration(IAppBuilder app) // https://docs.microsoft.com/en-us/aspnet/samesite/owin-samesite CookieManager = new SameSiteCookieManager(new SystemWebCookieManager()), + // Configure Auth0's Logout URL by hooking into the RedirectToIdentityProvider notification, + // which is getting triggered before any redirect to Auth0 happens. Notifications = new OpenIdConnectAuthenticationNotifications { RedirectToIdentityProvider = notification => { + // Only when the RequestType is OpenIdConnectRequestType.Logout should we configure the logout URL. + // Any other RequestType means a different kind of interaction with Auth0 that isn't logging out. if (notification.ProtocolMessage.RequestType == OpenIdConnectRequestType.Logout) { var logoutUri = $"https://{auth0Domain}/v2/logout?client_id={auth0ClientId}";