Configurable Logout URL

[fionera]

NetBox version

v3.3.2

Feature type

New functionality

Proposed functionality

I'd like to have a configuration option to set a custom URL for the Logout Button in Netbox.

As example a config parameter REMOTE_AUTH_LOGOUT which gets set to the URL of the Logout-Endpoint.

The original Issue #9316 was closed and locked and I just dont understand why. This doesnt help in any way since I now had to make a copy of this issue.

Use case

I'm using Authentik and OAuth2-Proxy for authentication. This means Netbox is protected by a reverse proxy that handles authentication and hands over the logged in user to Netbox via an HTTP header, configured by the Netbox option REMOTE_AUTH_HEADER.

When clicking "Logout" in Netbox Menu nothing happens because no logout in Authentik is made and I'm immediatly re-logged-in in Netbox (the HTTP header set by the reverse proxy is still present because the session in Authentik is still active). To solve this problem a configurable Logout URL is needed, so the click on logout in netbox calls the sign_out URL of Authentik.

Perhaps the following docs can help to get a full picture of what I'm trying to achieve.

goauthentik.io/docs/providers/proxy
goauthentik.io/docs/providers/proxy/#logging-out
https://oauth2-proxy.github.io/oauth2-proxy/docs/features/endpoints#sign-out

Database changes

No response

External dependencies

No response

[kkthxbye-code]

I understand what you want to achieve and why. What I fail to see is why you are not just rewriting the logout URL in whatever webserver/reverse proxy you have before netbox.

Other alternative solutions include adding a custom logout URL to either the header or footer. You could even inject a small javascript snippet that changes the URL.

Personally I don't believe this is a netbox problem and I would rather avoid the clutter for a feature I can only assume will be very rarely used (I looked for other software with a custom logout URL but found basically nothing). I'll let the other maintainers decide, but wanted to give my opinion.

[fionera]

Because I also have to logout in Netbox itself. If I just override the logout url, the user isnt logged in via OAuth2 but still in Netbox. This probably wont be an issue since Netbox will directly use the new Header, but I have to test that.

[kkthxbye-code]

Because I also have to logout in Netbox itself. If I just override the logout url, the user isnt logged in via OAuth2 but still in Netbox. This probably wont be an issue since Netbox will directly use the new Header, but I have to test that.

Could you please amend the issue with the exact requested functionality then. Because just making the logout URL configurable will have the same issue. Sounds like you want a configurable redirect URL after logout like the django LOGOUT_REDIRECT_URL setting. I think we have our own logout view so I don't think it works out of the box though.

[jeremystretch]

The original Issue #9316 was closed and locked and I just dont understand why.

Per my comment here, the OP was asked to provide more detail but opted not to, so no further progress was made on the issue.

[fionera]

LOGOUT_REDIRECT_URL sounds like a good description. I want to either logout from Netbox and redirect to a specific url or override the logout button to be a custom url with the netbox logout url as redirect parameter ( eg. /oauth/logout?redirect=NETBOX_HANDLER )

[jsenecal]

Relevant Django approach: django/django@dcee1df

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. NetBox is governed by a small group of core maintainers which means not all opened issues may receive direct feedback. Do not attempt to circumvent this process by "bumping" the issue; doing so will result in its immediate closure and you may be barred from participating in any future discussions. Please see our contributing guide.