auth0 / auth0-oidc-client-net

OIDC Client for .NET Desktop and Mobile applications
https://auth0.github.io/auth0-oidc-client-net/
Apache License 2.0
84 stars 49 forks source link

Uninstalling the app without logging out didn't clear the browser’s session cookie (Xamarin Android) #247

Closed juniorsaraviao closed 1 year ago

juniorsaraviao commented 1 year ago

Describe the problem

This is not a bug reported but a question. When uninstalling the app without logging out, it didn't clear the browser's session cookies. So, If I install the app again and tap log in, it doesn't ask me for credentials.

What was the expected behavior?

Is there a way to clear the browser's session cookies after uninstalling the app on Android? I compared it with iOS, and the iOS app removed the browser's session cookies after uninstalling it without logging out.

There's a link in the Auth0 community here. And it said "Uninstalling the app without logging out won’t/can’t clear the browser’s session cookie" and the user should log out first and then uninstall the app.

Reproduction

Environment

  1. Language used: C#
  2. Framework used: Xamarin forms (v5.0.0.2515)
  3. Xamarin Android - Auth0 version: Auth0.OidcClient.AndroidX (v3.2.7)

Testing environment

  1. Operating system: Windows 10
  2. Browser version: Samsung A11 (Android 11) - Genymotion Custom Phone (Android 8)
frederikprijck commented 1 year ago

Thanks for reaching out. As mentioned in the community thread, our SDK is not responsible for setting, maintaining or clearing the cookie. That's done by the browser itself.

I am not aware of any way to clear the cookies upon uninstalling an application, but that looks to be outside of the scope of our SDK.

Closing this, as it looks like it's answered on the community thread you linked.