express-openid-connect - npm Package Compare versions

Comparing version 2.12.0 to 2.12.1

lib/client.js

@@ -108,6 +108,7 @@ const { Issuer, custom } = require('openid-client');
 
-  if (config.idpLogout && !issuer.end_session_endpoint) {
+  if (config.idpLogout) {
     if (
       config.auth0Logout ||
-      url.parse(issuer.issuer).hostname.match('\\.auth0\\.com$')
+      (url.parse(issuer.issuer).hostname.match('\\.auth0\\.com$') &&
+        config.auth0Logout !== false)
     ) {
@@ -134,3 +135,3 @@ Object.defineProperty(client, 'endSessionUrl', {
       });
-    } else {
+    } else if (!issuer.end_session_endpoint) {
       debug('the issuer does not support RP-Initiated Logout');
@@ -137,0 +138,0 @@ }

lib/config.js

@@ -96,3 +96,3 @@ const Joi = require('joi');
     .unknown(false),
-  auth0Logout: Joi.boolean().optional().default(false),
+  auth0Logout: Joi.boolean().optional(),
   tokenEndpointParams: Joi.object().optional(),
@@ -99,0 +99,0 @@ authorizationParams: Joi.object({

package.json

 {
   "name": "express-openid-connect",
-  "version": "2.12.0",
+  "version": "2.12.1",
   "description": "Express middleware to protect web applications using OpenID Connect.",
@@ -5,0 +5,0 @@ "homepage": "https://github.com/auth0/express-openid-connect",

No alert changes

Improved metrics

Total package byte prevSize

91748

increased by0.03%

Lines of code

2551

increased by0.04%

No dependency changes