search

SSWConsulting / SSW.Rewards.Mobile

https://rewards.ssw.com.au
Apache License 2.0
29 stars 8 forks source link

🔒 [Tech Debt] Logging out allows immediate paswordless login #270

Open matt-goldman opened 2 years ago

matt-goldman commented 2 years ago

Logging out in the app only logs you out of the app, not the system wide session for IDS.

We need to implement front channel logout for this to work. Dependent on: https://github.com/SSWConsulting/SSW.IdentityServer/issues/38

AntPolkanov commented 6 months ago

Hey @matt-goldman, do you know if it's still relevant?

matt-goldman commented 6 months ago

Kind of, but I think given we are using SSO maybe the right approach is to remove 'logout' from the app altogether? Need a little research here.

AntPolkanov commented 6 months ago

@matt-goldman (cc: @zacharykeeping), we cannot remove the Logout button as users should be able to switch between different profiles. Lowering the Severity from 2 to 3 for now, it doesn't seem pressing.