OWASPASVS 5.0 requirement
ASVS-V10.6.2 The openid provider mitigates denial of service through forced logout.
- Standard
- OWASP ASVS 5.0
- Chapter
- V10 OAuth and OIDC
- Section
- V10.6 OpenID Provider
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that the OpenID Provider mitigates denial of service through forced logout. By obtaining explicit confirmation from the end-user or, if present, validating parameters in the logout request (initiated by the relying party), such as the 'id_token_hint'.