AxaFrance / oidc-client

Light, Secure, Pure Javascript OIDC (Open ID Connect) Client. We provide also a REACT wrapper (compatible NextJS, etc.).
MIT License
570 stars 152 forks source link

Refresh token should be hidden by service worker on WebKit based browser #1382

Open dmushkov opened 3 weeks ago

dmushkov commented 3 weeks ago

When login for first time through IdP when loginCallbackAsync is called error Refresh token should be hidden by service worker is occurring. On second time with new tab open looks ok

I'm using with following configuration

const configuration = { client_id: process.env.NEXT_PUBLIC_OIDC_CLIENT_ID ?? '', redirect_uri:${process.env.NEXT_PUBLIC_URL}/#authentication/callback, silent_redirect_uri:${process.env.NEXT_PUBLIC_URL}/#authentication/silent-callback, scope: 'openid profile email api offline_access', authority: process.env.NEXT_PUBLIC_OIDC_AUTHORITY ?? '', service_worker_only: true, service_worker_relative_url: '/OidcServiceWorker.js', preload_user_info: true };

version 7.22.6

To reproduce epiphany can be used for WebKit based browser

Might be same as

1119

guillaume-chervet commented 3 weeks ago

Hi @dmushkov thank you for your issue. I have to reproduce it.it is an important one. It point the real problem it will help a lot to fix it ! Thank you