Unverified50% confidenceSolutionExact time
In the back-channel logout flow, when a user logs out at the IdP, the IdP sends an HTTP POST request containing a signed JWT logout token to the back-end endpoints of all registered Relying Parties (RPs).
1
Sources
50%
Confidence
Long-term
Relevance
9/11/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedBack-channel logout relies on HTTP POST requests; if an RP endpoint is unreachable, the logout notification fails, and the specification recommends that IdPs implement a retry mechanism but does not mandate it.69% similarUnverified令牌自省端点（/introspect，RFC 7662）允许资源服务器向授权服务器发送 POST 请求，获取包含 active、scope、exp、sub 等元数据的 JSON 响应60% similarUnverifiedThe workflow sends the OIDC token to AWS STS's AssumeRoleWithWebIdentity endpoint; after AWS verifies the signature, it compares the token claims against the role trust policy conditions, and only issues temporary credentials if all conditions are satisfied.59% similarUnverifiedSync-in 2.5 strengthens the OnlyOffice callback verification security mechanism, ensuring that callback requests must carry a valid JWT-signed token.59% similarUnverifiedCookie同步机制中用户ID通过URL参数在HTTP重定向链中以明文形式传递，中间人攻击者可截获这些同步请求57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/899050API
curl https://kongchang.com/api/v1/knowledge/claims/899050MCP
get_claim(id=899050)