Improve silent auth - Githubissues

ExtensionEngine / tailor

Content authoring platform

MIT License

31 stars 10 forks source link

Improve silent auth #736

Closed kronicker closed 3 years ago

kronicker commented 3 years ago

This PR:

includes id_token_hint in auth request when doing silent authentication. Check OIDC Spec for more info

QA notes:

This should fix login with Google. Two caveats still exist that cannot be easily handled with current implementation:

If you clear cookies on Tailor and have more than one logged-in Google account you will have to re-login
Logout from Google is still possible only by consuming global Google logout. After that user has to manually navigate back to Tailor
Please do a regression with Okta and Auth0 as well. Thy