Hey, I just tested this and it works perfectly! Thanks a bunch.

Only comment I have is that, when creating the EndSessionRequest, you assume that the user has an IdToken, I'm not really sure if this should be required. I our implementation towards KeyCloak I can send the AccessToken/RefreshToken instead.

So I'm not really sure if it brings any value to the PR, but I just found it confusing that the parameter was called idToken.

@cratrifork Per https://openid.net/specs/openid-connect-session-1_0.html#RPLogout the paramater should be the previously issued ID token.
Different vendors may support other hints as this parameter but the purpose here is not create a KeyCloak-specific implementation.

Any chance this might get reviewed and merged? We'd love to have this functionality since we're having issues with getting our logout flow to respect the App Link we have registered and go back to our app, and it's probably due to the hacky workarounds. Tagging @iainmcgin since it seems like you're a current maintainer. Happy to help if I can in some way.

Any updates on this PR? we are currently in the same situation and this PR will solve out problems too.

Codecov Report

❗ No coverage uploaded for pull request base (master@27b62d5). Click here to learn what that means.
The diff coverage is 84.37%.

@@            Coverage Diff            @@
##             master     #525   +/-   ##
=========================================
  Coverage          ?   83.84%           
  Complexity        ?      511           
=========================================
  Files             ?       47           
  Lines             ?     2470           
  Branches          ?      238           
=========================================
  Hits              ?     2071           
  Misses            ?      312           
  Partials          ?       87           

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 27b62d5...ed7e194. Read the comment docs.

Updated this PR integrating the latest changes.

If you need, you may grab a binary from: https://jitpack.io/#agologan/AppAuth-Android/ed7e1946ae

FYI: this added an API breaking change (removing the 3 arg constructor from AuthorizationServiceConfiguration).

FYI: this added an API breaking change (removing the 3 arg constructor from AuthorizationServiceConfiguration).

Fixed backwards compatibility issue in #636 . Thank you.