implementing-fsa-logout

What problem does it solve?

Web applications that rely on Scalekit OIDC SSO often fail to securely terminate sessions, leaving lingering cookies or relying on provider sessions. This Skill provides a robust logout flow that clears the application's session cookies and redirects the user to Scalekit's /oidc/logout endpoint to invalidate the Scalekit session.

Core Features & Use Cases

• Unified logout endpoint: Exposes a GET /logout route to terminate local session data and trigger Scalekit's logout.
• Secure token handling: Reads idToken before clearing cookies to supply id_token_hint to Scalekit's logout.
• Redirect-based invalidation: Uses a browser redirect to Scalekit's /oidc/logout to ensure the Scalekit session is ended.
• Post-logout redirect control: Requires post_logout_redirect_uri to be allowlisted in the Scalekit dashboard and navigates users back to a safe URL.
• Cross-stack templates: Includes implementation templates for Node.js/Express, Python/Flask, Go/Gin, and Java/Spring Boot.

Quick Start

Add a GET /logout route that reads the idToken before clearing cookies, builds the Scalekit logout URL, clears session cookies, and redirects the browser to the Scalekit logout URL.