abpframework / abp

Open Source Web Application Framework for ASP.NET Core. Offers an opinionated architecture to build enterprise software solutions with best practices on top of the .NET and the ASP.NET Core platforms. Provides the fundamental infrastructure, production-ready startup templates, application modules, UI themes, tooling, guides and documentation.
https://abp.io
GNU Lesser General Public License v3.0
12.27k stars 3.32k forks source link

The `SignOutIframeUrl` is normalized to `/`, causing other logged-in clients to fail to sign logout #19593

Open ArcherTrister opened 1 week ago

ArcherTrister commented 1 week ago

Is there an existing issue for this?

Description

Single sign-on was fine with ABP version 5.3.5, but when I upgraded to 7.4.5, The SignOutIframeUrl was normalized to / causing single logout failure. 4248219642 1739051974

Reproduction Steps

Create a new tiered template project that includes a web client, add a angular client for single sign-on, log in to both the web and angular clients, log out of one of them, refresh the other client to see that it is still logged in.

Expected behavior

The SignOutIframeUrl is a normal URL rather than a /.

Actual behavior

No response

Regression?

Yes, older versions are fine, like 5.3.5. 3187905279 91181182

Known Workarounds

No response

Version

7.4.5

User Interface

MVC

Database Provider

EF Core (Default)

Tiered or separate authentication server

Tiered

Operation System

Windows (Default)

Other information

No response