Cannot call logout endpoint successfully

Questions
1

I am trying to log users out of an SPA and failing miserably. I generate a url to navigate to like this:

https://dev-xxxxx.okta.com/oauth2/default/v1/logout?id_token_hint={id_token}&post_logout_redirect_uri=https:%2F%2Flocalhost%3A44333

and then use window.location.href to navigate to it.

The problem comes on the return from Okta - it comes back with a code / state in its url as if I’d requested the login process. My auth code then automatically signs the user in automatically.

My question is why does it come back trying to re-initiate a login, and not just back to the logout redirect uri?

2

I would suggest collecting a HAR/network log and see what could be triggering a login. Okta should be redirecting to https://localhost:44333 after logout. I believe it will contain a state in the url but it shouldn’t return an authorization code.
https://developer.okta.com/docs/reference/api/oidc/#response-example-success-4