CIAM logout needs authority to contain tenant path

rayluo · rayluo · commit 5e509d6e1413 · 2024-03-04T14:38:34.000-08:00
diff --git a/.env.sample b/.env.sample
@@ -10,13 +10,12 @@ CLIENT_SECRET=<client secret>
 #    "https://login.microsoftonline.com/TENANT_GUID"
 #    or "https://login.microsoftonline.com/subdomain.onmicrosoft.com".
 #
-#    Alternatively, use the ".../common" if you are building a multi-tenant AAD app
-#    in world-wide cloud
-AUTHORITY=https://login.microsoftonline.com/common
+#    Alternatively, use "https://login.microsoftonline.com/common" for multi-tenant app.
+AUTHORITY=<authority url>
 #
 #
 # 2. If you are using a Microsoft Entra External ID for customers (CIAM) tenant,
-#    configure AUTHORITY as "https://subdomain.ciamlogin.com"
+#    configure AUTHORITY as https://subdomain.ciamlogin.com/subdomain.onmicrosoft.com
 #AUTHORITY=<authority url>
 
 # Your project's redirect URI. For example: http://localhost:5000/redirect
diff --git a/mysite/views.py b/mysite/views.py
@@ -6,7 +6,7 @@
 import requests
 
 
-__version__ = "0.2.0"
+__version__ = "0.3.0"
 
 
 @settings.AUTH.login_required

Original file line number	Diff line number	Diff line change
`@@ -10,13 +10,12 @@ CLIENT_SECRET=<client secret>`
`10`	`10`	`# "https://login.microsoftonline.com/TENANT_GUID"`
`11`	`11`	`# or "https://login.microsoftonline.com/subdomain.onmicrosoft.com".`
`12`	`12`	`#`
`13`		`-# Alternatively, use the ".../common" if you are building a multi-tenant AAD app`
`14`		`-# in world-wide cloud`
`15`		`-AUTHORITY=https://login.microsoftonline.com/common`
	`13`	`+# Alternatively, use "https://login.microsoftonline.com/common" for multi-tenant app.`
	`14`	`+AUTHORITY=<authority url>`
`16`	`15`	`#`
`17`	`16`	`#`
`18`	`17`	`# 2. If you are using a Microsoft Entra External ID for customers (CIAM) tenant,`
`19`		`-# configure AUTHORITY as "https://subdomain.ciamlogin.com"`
	`18`	`+# configure AUTHORITY as https://subdomain.ciamlogin.com/subdomain.onmicrosoft.com`
`20`	`19`	`#AUTHORITY=<authority url>`
`21`	`20`
`22`	`21`	`# Your project's redirect URI. For example: http://localhost:5000/redirect`