Return point for the upstream provider's sign-out
GET/oauth2/logout/done
Where the identity provider returns the browser after its own sign-out. Redirects to the post_logout_redirect_uri saved in the __Host-esp_logout_to cookie, or answers 200 Signed out. when there is none. This is the one sign-out URL registered with the provider; applications never call it.
Responses
- 200
- 302
No memo, or one naming somewhere this server will not forward to: the sign-out is reported complete rather than inventing a destination.
Redirect to the remembered destination, clearing the memo cookie.