search

AzureAD / azure-activedirectory-library-for-js

The code for ADAL.js and ADAL Angular has been moved to the MSAL.js repo. Please open any issues or PRs at the link below.
https://github.com/AzureAD/microsoft-authentication-library-for-js/tree/dev/maintenance/adal-angular
Apache License 2.0
627 stars 374 forks source link

AADSTS50132: The session has expired or has been revoked - AngularJS 1.7.6 and Adal 1.0.17 #871

Closed venkatgude90 closed 4 years ago

venkatgude90 commented 5 years ago

I'm submitting a...


[ ] Regression (a behavior that used to work and stopped working in a new release)
[x] Bug report  
[ ] Performance issue
[ ] Feature request
[ ] Documentation issue or request
[ ] Other... Please describe:

Browser:

Library Name

Library version

Library version: 1.0.17

Current behavior

I have accessed application and left browser without closing window and revisited the page after token expiry then refresh page causing infinite loop to login with renew status InProgress and Cancelled. Able to see below errors in console. Where as if I close and reopen window is wor

  1. "AADSTS50132: The session has expired or has been revoked.
  2. Set-Cookie header is ignored in response from url: . Cookie length should be less than or equal to 4096 characters.

Expected behavior

Application either need to prompt for login or allow to access pages by renewing token.

Minimal reproduction of the problem with instructions

  1. Configure ADAL in application and login.
  2. Wait for token to expire (in my case it is 5 hours)
  3. Refresh page
jmckennon commented 4 years ago

This infinite loop in adal js is a known bug and is fixed in msal js. All current authentication work from Microsoft is delivered through the msal js library here. adal js is still supported only for security fixes. We recommend moving to msal js for any advanced feature requests and bugfixes.