Class BackChannelLogoutExecutor


Executor for the OIDC back-channel logout endpoint. Handles logout tokens sent by the IdP when a user logs out from the IdP or another application in the SSO ecosystem. Per OIDC Back-Channel Logout spec: - The logout_token JWT contains either 'sub' (subject) or 'sid' (session ID) - We find and delete matching QQQ sessions - Return HTTP 200 on success (even if no sessions found)