refactor(auth0): rename config key federated to federatedLogout

The `federated` config key was ambiguous. Rename to `federatedLogout`
for clarity since it specifically controls federated logout behavior.

Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.changeset/auth0-federated-logout.md

@@ -2,4 +2,4 @@
 '@backstage/plugin-auth-backend-module-auth0-provider': minor
 ---
 
-Added federated logout support. On sign-out, the Auth0 authenticator now returns a logout URL that redirects the browser to Auth0's `/v2/logout?federated` endpoint, clearing both the Auth0 session and any upstream IdP session. This ensures users must fully re-authenticate after signing out.
+Added federated logout support. Set `federatedLogout: true` in the Auth0 provider config to clear both the Auth0 session and any upstream IdP session on sign-out. The authenticator returns a logout URL that redirects the browser to Auth0's `/v2/logout?federated` endpoint, ensuring users must fully re-authenticate after signing out.

plugins/auth-backend-module-auth0-provider/config.d.ts

@@ -37,7 +37,7 @@ export interface Config {
            * Whether to perform federated logout, clearing both the Auth0
            * session and any upstream IdP session. Defaults to false.
            */
-          federated?: boolean;
+          federatedLogout?: boolean;
           sessionDuration?: HumanDuration | string;
         };
       };

plugins/auth-backend-module-auth0-provider/src/authenticator.ts

@@ -85,7 +85,7 @@ export const auth0Authenticator = createOAuthAuthenticator({
         },
       ),
     );
-    const federated = config.getOptionalBoolean('federated') ?? false;
+    const federated = config.getOptionalBoolean('federatedLogout') ?? false;
     return {
       helper,
       audience,

plugins/auth-backend-module-auth0-provider/src/module.test.ts

@@ -225,7 +225,7 @@ describe('authModuleAuth0Provider', () => {
     );
   });
 
-  it('should include federated param when federated is true', async () => {
+  it('should include federated param when federatedLogout is true', async () => {
     const { server } = await startTestBackend({
       features: [
         authPlugin,
@@ -242,7 +242,7 @@ describe('authModuleAuth0Provider', () => {
                     clientId: 'test-client-id',
                     clientSecret: 'clientSecret',
                     domain: 'test.eu.auth0.com',
-                    federated: true,
+                    federatedLogout: true,
                   },
                 },
               },