GitLab

CORS need to be correctly configured if not this can lead to security issues.
Please do not put Access-Control-Allow-Origin: "*".
You can use django-cors-headers to properly configure CORS

Otherwise some backend may logout before we are actually logged out from the CAS

cf phpCAS official implementation