Enable silent auth flow and logout from IdP

ExtensionEngine / tailor

Content authoring platform

MIT License

31 stars 10 forks source link

Enable silent auth flow and logout from IdP #701

Closed kronicker closed 3 years ago

kronicker commented 3 years ago

This PR:

[x] Adds silent OIDC token refresh/auth on app boot
[x] Adds logout from IdP if OIDC session is active
[x] Enables non-standard post logout URL key
[x] Keeps support for both local and OIDC login

Tested with:

[x] Auth0
[x] Okta
[x] Google

Closes #632

bubafinder commented 3 years ago

Logout on Okta side
After logout click on the Tailor side, error presented

After manual back to the localhost URL, the user is still logged

kronicker commented 3 years ago

@markolovric Should work properly now. Tested with okta, auth0, and google.

underscope commented 3 years ago

@markolovric Works for me and @kronicker (dev + prod mode). There was a configuration issue on OKTA that I updated/fixed today (in case that was the provider you were testing with). If you are still having issues it is most likely local config issue; let's sync regarding it on Mon).

@kronicker App hangs a bit upon start due to auth init behind the scenes. Please revisit and see how we can improve it.