Cloudflare Access - Google Logout

access

#1

Hello people,

First of all I would like to thank the cloudflare team, Access is really a great app, but I have a problem that ends up leading to a security bug

I use Google as an authentication method, but I’d like to configure it so that when I log out on my site my Google account is also disconnected, in order to ensure account security, someone else has had this difficulty that you can help me?

thank you

OBS: Sorry for my English :smile:


CloudFlare Acess - Logout google Account
#2

You mean that you need to logout of Google (google.com and other Google properties) while logging out of your app?

I don’t think that is doable…


#3

Yes, the idea is how to access the application I log in to Google when Disconnecting from the site the account would need to be disconnected too, otherwise someone else could access the url of my application again click on the google option and it would already be authenticated.

Anyway I found the solution and will post here if someone has the same problem just direct the logout to url below

https://www.google.com/accounts/Logout?continue=https://appengine.google.com/_ah/logout?continue=https://{yourcloudflareacess}.cloudflareaccess.com/cdn-cgi/access/logout


#4

First of all I would like to thank the cloudflare team, Access is really a great app, but I have a problem that ends up leading to a security bug

I use Google as an authentication method, but I’d like to configure it so that when I log out on my site my Google account is also disconnected, in order to ensure account security, someone else has had this difficulty that you can help me?

I configured my account as oriented https://developers.cloudflare.com/access/setting-up-access/clearing-user-sessions/ any adicional config needed?


Access (Setup & Usage)
#5

Hello!!
Glad you are enjoying Access!

You can do this by calling google’s logout and then call the access’s logout endpoint like this:

var logout = function(){
document.location.href = “https://www.google.com/accounts/Logout?continue=https://appengine.google.com/_ah/logout?continue=https:///cdn-cgi/access/logout”;
}

Let me know if it works for you.


#6

Thank you very much, I took the test and it worked.


#7

I merged the other posts in here since they were duplicates. Glad you found a solution!


#8

This topic was automatically closed after 14 days. New replies are no longer allowed.