search

AxaFrance / oidc-client

Light, Secure, Pure Javascript OIDC (Open ID Connect) Client. We provide also a REACT wrapper (compatible NextJS, etc.).
MIT License
601 stars 161 forks source link

After restarting IIS(OIDC Server), I receive an error as State not valid #1318

Open ozanmanav opened 9 months ago

ozanmanav commented 9 months ago

Issue and Steps to Reproduce

After restarting IIS, I receive an error as follows when users first log in. After redirect login and try again it works.

Versions

7.19.0

Screenshots

image

After refresh in same page: image

Expected

It should work for first login.

Actual

It is getting error after reset IIS session.

guillaume-chervet commented 9 months ago

hi @ozanmanav ,

Thank you again for your issue :) Are you restarting your Application Server or your OIDC Server? Do you have the all newtork history? to understand what's happening?

ozanmanav commented 8 months ago

1- Our OIDC IIS Server 2- I don't have any network history only have this link and these console messages:

/auth-callback?code=RkdVAiHe-dC0CoDQkQCIvP747mXZPlhFnxuC1IxiBj8&state=5bNZgSMAwLxFAvqR&iss=XXXXX

image

ozanmanav commented 8 months ago

@guillaume-chervet We realized that it was related to service worker and had to turn off this mode. :/

guillaume-chervet commented 8 months ago

Thank you @ozanmanav for the feedback. It is a strange bug. I cannot reproduce it.

guillaume-chervet commented 8 months ago

I found the problem I think and fixed it here : https://github.com/AxaFrance/oidc-client/commit/44d15be1c4d8f5069f15ddc5351e546fc5eb7730

It took me time to find it @ozanmanav but it already fix the HTTP 401 on the userinfo endpoint on the first connection.

ozanmanav commented 2 months ago

This still seems to be the case, we get an error on the first login when we reset iis on the server side. @guillaume-chervet :/