There's no need account password to login again after logout

SolidOS / mashlib

Solid-compatible data mashup library and Data Browser

https://solidos.github.io/mashlib/dist/browse.html

MIT License

72 stars 22 forks source link

There's no need account password to login again after logout #164

Open gp125fi opened 2 years ago

gp125fi commented 2 years ago

I need my account password to login for the first time to check my private data with the SolidOS Databrowser Webapp. After that, I press logout button, and then press login button again. However, this time it doesn't need account password to login. I guess something still cached.

Otto-AA commented 2 years ago

From my understanding, this is the expected behavior in Solid, and not a bug. The logout on the client side (e.g. with this solid-client function) does not log you out from the Identity Provider (e.g. solidcommunity.com).

If you login again with the same identity provider, then it redirects to the identity provider, where you are still loggedin, and the login finishes.

hsinpeng commented 2 years ago

I think this is a bug. The mashlib do follow the OIDC sesson end procedure. Somehow, it cannot direct user to perform log-out. The phenomenon I saw is as the following.