Description of your problem
When using header authentication in Graylog, logouts are not possible. The page merely reloads and the user is logged back in.
Description of steps you’ve taken to attempt to solve the issue
I’ve noticed the user merely gets directed to /. There is no specific logout url. I can see there is a DELETE call to /api/system/sessions/X.
Since I’m using nginx, I’ve added a section into my reverse proxy configuration that adds some javascript using ngx_http_sub_module which performs a proper logoff. This works, but is a bit of a hack.
Environmental information
Graylog 4.1.6
Operating system information
CentOS
I am curious if anybody else has solved this issue or found a workaround for it? Including a configuration option linked to trusted headers like logout_redirect_url (which would redirect the user to a logout page after clicking logout) would be useful.