Client gets logged out after ~10 seconds on localhost in firefox with Strict tracking protection

IdentityModel / oidc-client-js

OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications

Apache License 2.0

2.43k stars 842 forks source link

Client gets logged out after ~10 seconds on localhost in firefox with Strict tracking protection #1321

Open Powersource opened 3 years ago

Powersource commented 3 years ago

Firefox version 86 (I recently updated my firefox version, idk which version I was running before)

Only happens on localhost, not production

And by "logged out" I just mean client-side, I still seem to be logged into my idp (keycloak 11.0.2)

I have more debugging notes and error messages in my issue here https://github.com/Edgeryders-Participio/realities/issues/229

I am technically using oidc-react (which in turn uses this library) but I think the problem is probably only fixable in this library?

brockallen commented 3 years ago

Did you ever figure this out?

LukaszGrela commented 3 years ago

In addition to this issue I have a similar one logged here. Hot reloading is in a some sort of a loop and in best case scenario logs user out after some repetitions. The last thing called is onUserSignedOut callback

const userManager: UserManager//...
//...
userManager.events.addUserSignedOut(onUserSignedOut)

where I clear local storage from user data. To me misbehaving browser is Dissenter though (Version 1.5.114 Chromium: 80.0.3987.149 (Official Build) (64-bit))