search

YunoHost / issues

General issue tracker for the YunoHost project
71 stars 8 forks source link

Be able to disable all SSO cookies for somes URLs for Microsoft active-sync #1657

Open Josue-T opened 3 years ago

Josue-T commented 3 years ago

It looks like that Microsoft active-sync really don't like the ssowat cookies.

https://github.com/YunoHost-Apps/sogo_ynh/issues/7#issuecomment-680257907

So maybe the solution would be to disable all cookies for some url but I don't know if it's possible and what would be the effects of this...

zamentur commented 7 months ago

If we have a nextcloud with a logout button that logout from nextcloud and run the action logout on sso. With this new feature/bug-fix it means by logout on nextcloud you are logged out from all web app...

We probably can manage a bit by using some params on the logout url

https://DOMAIN/yunohost/sso/?action=logout&scope=all
https://DOMAIN/yunohost/sso/?action=logout&scope=nextcloud

Totally unrelated, I tried to delete nextcloud sessions server side but i was surprized that sessions files are recreated , and i am not logged out (even if the sso is logged out) !

rm -f /var/lib/php/sessions/*
OniriCorpe commented 5 months ago

I think it could be fixed by active_sync.auth_header = false in [resources.permissions] using packaging v2