AxaFrance / oidc-client

Light, Secure, Pure Javascript OIDC (Open ID Connect) Client. We provide also a REACT wrapper (compatible NextJS, etc.).
MIT License
597 stars 160 forks source link

Refresh token should be hidden by service worker on WebKit based browser #1382

Open dmushkov opened 5 months ago

dmushkov commented 5 months ago

When login for first time through IdP when loginCallbackAsync is called error Refresh token should be hidden by service worker is occurring. On second time with new tab open looks ok

I'm using with following configuration

const configuration = { client_id: process.env.NEXT_PUBLIC_OIDC_CLIENT_ID ?? '', redirect_uri:${process.env.NEXT_PUBLIC_URL}/#authentication/callback, silent_redirect_uri:${process.env.NEXT_PUBLIC_URL}/#authentication/silent-callback, scope: 'openid profile email api offline_access', authority: process.env.NEXT_PUBLIC_OIDC_AUTHORITY ?? '', service_worker_only: true, service_worker_relative_url: '/OidcServiceWorker.js', preload_user_info: true };

version 7.22.6

To reproduce epiphany can be used for WebKit based browser

Might be same as

1119

guillaume-chervet commented 5 months ago

Hi @dmushkov thank you for your issue. I have to reproduce it.it is an important one. It point the real problem it will help a lot to fix it ! Thank you