Hi *, by chance I had to give a look at the LogoutServlet (o.a.s.auth.core.impl) and I have noticed that it does support out of the box GET and POST methods and this is also not configurable. As you know it would be better that the log out would work only for POST. There are several example in the wild showing why... :)
What do you think to do it at least configurable with POST method by default ? Regards Antonio
