auth0 / Auth0.Android

Android toolkit for Auth0 API
https://auth0.com
MIT License
208 stars 130 forks source link

Cookie not cleared after logout #704

Closed nimithar closed 7 months ago

nimithar commented 7 months ago

Checklist

Description

The docs mention that calling WebAuthProvider.logout() would remove the cookie set by the browser at authentication time, but after logging out, I am able to login without having to re-enter my credentials for a few minutes after logging out.

Reproduction

  1. Login via SSO -> redirected to the IdP -> enter user credentials -> logged in
  2. Logout
  3. Login via SSO -> user is logged into the app without having to re-enter credentials

Additional context

No response

Auth0.Android version

2.10.2

Android version(s)

13.6

poovamraj commented 7 months ago

@nimithar Please check out the documentation on logging out from IdPs here - https://auth0.com/docs/authenticate/login/logout/log-users-out-of-idps

You have to pass the federated parameter and the logout is supported only by select IdPs. Hope this helps. We will close this issue now but feel free to comment here and we can reopen this issue if required.