Microsoft-authentication-library-for-js: Add logoutPopup method to UserAgentApplication

[arsnyder16]

Please follow the issue template below. Failure to do so will result in a delay in answering your question.

Library

• [X] [email protected] or @azure/[email protected]
• [ ] @azure/[email protected]
• [ ] @azure/[email protected]
• [ ] @azure/[email protected]
• [ ] @azure/[email protected]

Description

It would be nice to supply a logoutPopup method. I am building an application that uses MSAL but it's for secondary features and is not critical to the application. So i want to supply my users a way to sign out of MSAL, currently UserAgentApplication only supports signing out through a redirect, but is disruptive to SPA. For now i can manually show a popup but this seems like something that should be part of the library.

const popup = window.open(`${auth.authority}/oauth2/v2.0/logout`, 'logout', 'width=450,height=600');
popup.focus();

[evanbattaglia]

I am also running into an issue where we show a page to make an MS Teams meeting link in an iframe. The logout() method does not work for us because it takes us to the logout page which sends the X-Frame-Options: Deny header, which disallows the page from being loaded in the iframe.

I've worked around it by borrowing code from the msal module to show the logout in a popup, but it's not pretty. (Also, when I added the postLogoutRedirectUri it didn't seem like I was being redirected back there. The way I have it set up now it's not the end of the world, though).

      //@ts-ignore
      msalApp.clearCache();
      //@ts-ignore
      msalApp.account = null;
      //@ts-ignore
      msalApp.authorityInstance.resolveEndpointsAsync().then(authority => {
        const urlNavigate = authority.EndSessionEndpoint
            ? authority.EndSessionEndpoint
            : `${msalApp.authority}oauth2/v2.0/logout`;
        (msalApp as any).openPopup(urlNavigate, "msal", 400, 600);
      });

[jasonnutter]

Closing, as we will consider this for MSAL Browser in #2563