feat(openid-connect): support OIDC Back-Channel Logout 1.0

apisix/cli/config.lua

@@ -183,6 +183,7 @@ local _M = {
         discovery = "1m",
         jwks = "1m",
         introspection = "10m",
+        bcl = "1m",
         ["access-tokens"] = "1m",
         ["ext-plugin"] = "1m",
         tars = "1m",

apisix/cli/ngx_tpl.lua

@@ -371,6 +371,7 @@ http {
     # for openid-connect plugin
     lua_shared_dict jwks {* http.lua_shared_dict["jwks"] *}; # cache for JWKs
     lua_shared_dict introspection {* http.lua_shared_dict["introspection"] *}; # cache for JWT verification results
+    lua_shared_dict bcl {* http.lua_shared_dict["bcl"] *}; # back-channel logout revocations
     {% end %}
 
     {% if enabled_plugins["cas-auth"] then %}