Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OpenID Logout Not Implemented #519

Closed
jskillen opened this issue Aug 4, 2020 · 3 comments
Closed

OpenID Logout Not Implemented #519

jskillen opened this issue Aug 4, 2020 · 3 comments

Comments

@jskillen
Copy link

jskillen commented Aug 4, 2020

  • [X ] The issue is present in the latest release.
  • [X ] I have searched the issues of this repository and believe that this is not a duplicate.

What happened?

Created OpenID integration with Auth0. Login integration works. Logging out does not seem to clear the data from the session and redirect the user to the Auth0 logout endpoint. Consequently the user is not challenged with credentials after logging out.

What did you expect?

When I return to the system after logging out I should be forced to log back in.

Steps to reproduce this issue

Steps:

  1. Implement the OpenID connector using Auth0.
  2. Log in to Chirpstack and use Auth0 to log in.
  3. Log out of Chirpstack.
  4. Log back in. Observe that the Auth0 login immediately redirects to Chirpstack without challenging the user for credentials.

Your Environment

ChirpStack Application Server 3.11.1

@brocaar
Copy link
Owner

brocaar commented Aug 5, 2020

I think this depends on coreos/go-oidc#226 to get merged in as this is the library I'm using for OIDC support.

@brocaar
Copy link
Owner

brocaar commented Aug 25, 2020

@jskillen the above change makes it possible to configure a logout_url endpoint.

@jskillen
Copy link
Author

Thanks @brocaar !

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants