| 1 | -- The raw OIDC ID token issued at login, kept only so sign-out can pass |
| 2 | -- `id_token_hint` to the provider's RP-Initiated Logout endpoint. Hydra |
| 3 | -- rejects `post_logout_redirect_uri` without it, which otherwise sends the |
| 4 | -- user to an error page while their local session is already gone. |
| 5 | ALTER TABLE sessions ADD COLUMN id_token text; |
5 lines · SQL