fix: iOS, AZURE AD > logout fail, no callback and com.apple.AuthenticationServices.WebAuthenticationSession exception

[dupuisdavid]

Description

Hello,
I'm trying to get logout to work in an integration using the OIDC package for iOS.
When I trigger the logout method of the manager, the Azure AD identity provider window opens correctly and indicates that the session has indeed been terminated on the IdP side.
However, the only option I have to close the window is a "Cancel" button, which does not trigger the callback to return to the iOS application.
Furthermore, I get an exception with the following information:
end_session_failed, code: -3, root_cause_debug_description: Error Domain=com.apple.AuthenticationServices.WebAuthenticationSession Code=1, etc.

Please note that:

I’m using the parameter OidcAppAuthExternalUserAgent.ephemeralAsWebAuthenticationSession.

I’ve defined the redirect URI (redirectUri) for the manager with a custom scheme as follows: com.company.app.staging.dev://oauth2redirect/, and I’ve set the postLogoutRedirectUri as: com.company.app.staging.dev://endsessionredirect/.

I’ve double-checked that these URIs are declared the same on the Azure AD side.

Any idea @ahmednfwela?

Thank you for your help.

[dupuisdavid]

Here is more precision when I also debug oidc source code :

The resp is never reached as if appAuth.endSession doesn't return anything or and exception (oidc_flutter_appauth.dart):

`final resp = await appAuth.endSession(
      EndSessionRequest(
        additionalParameters:
            request.extra.map((key, value) => MapEntry(key, value.toString())),
        serviceConfiguration: AuthorizationServiceConfiguration(
          endSessionEndpoint: metadata.endSessionEndpoint?.toString(),
          authorizationEndpoint: metadata.authorizationEndpoint.toString(),
          tokenEndpoint: metadata.tokenEndpoint.toString(),
        ),
        idTokenHint: request.idTokenHint,
        allowInsecureConnections: getAllowInsecureConnections(options),
        externalUserAgent: getExternalUserAgent(options),
        state: request.state,
        issuer: metadata.issuer?.toString(),
        postLogoutRedirectUrl: request.postLogoutRedirectUri?.toString(),
      ),
    );`

[ahmednfwela]

I guess this is another reason to remove the appauth dependency entirely

[ahmednfwela]

@dupuisdavid can you please record a video of what happens?