search

Azure / azure-sdk-for-java

This repository is for active development of the Azure SDK for Java. For consumers of the SDK we recommend visiting our public developer docs at https://docs.microsoft.com/java/azure/ or our versioned developer docs at https://azure.github.io/azure-sdk-for-java.
MIT License
2.26k stars 1.94k forks source link

[QUERY] Azure Spring Boot starter - AADB2CAuthorizationRequestResolver clearing Spring Security Context #15427

Closed R0st0s closed 3 years ago

R0st0s commented 3 years ago

Query/Question This is related to the Azure AD B2C Spring Boot starter. It uses the AADB2CAuthorizationRequestResolver to construct the request to B2C, and as part of that, it clears the Spring Security context. See: Source Whenever the logged in user cancels a flow, for example a profile edit or some custom policy that's not login or logout, you would expect to keep the user logged in. Spring's DefaultOAuth2AuthorizationRequestResolver doesn't do that.

Why is this not a Bug or a feature Request? There might be a valid reason for this behaviour.

Setup (please complete the following information if applicable):

joshfree commented 3 years ago

@jialindai could you please follow up on this azure-spring-aad-b2c question

saragluna commented 3 years ago

@backwind1233 will help fix this issue, and we'll fix it by deleting this line:

https://github.com/Azure/azure-sdk-for-java/pull/18489/files#diff-8bd1fd1cfe71fa42206bb4ef48363ae942cc3a021c738e53384cac88574c784fL89

yiliuTo commented 3 years ago

Closing this issue because the PR has been merged