search

cloudflare / cloudflare-access-for-atlassian

Authenticate Atlasssian products when using Cloudflare Access
Other
45 stars 15 forks source link

Logout doesn't work right #48

Closed mschantl05 closed 4 years ago

mschantl05 commented 4 years ago

We are experiencing an issue with the logout functionality of the CFA Plugin for Atlassian. Clicking the Logout Button does not actually log you out (there is a "logout success" message, and we believe that it does actually perform some kind of logout, but when you go back to the application, you are still logged in) and the only way to do so is by clearing cookies for the site (confirmed on JIRA and Bitbucket).

Jira: v8.5.1 Bitbucket: v6.8.0 Plugin: 2.11

TownLake commented 4 years ago

Thanks for the feedback. The plugin uses the cookie that Access signs in the browser. When the user logs out of the Atlassian session, they do log out of that current session (and the message from Atlassian is displayed) but the token is likely still active and present in the browser. The user can then redirect back and login.

We'll take a look at making the Atlassian logout flow call the Access logout endpoint.

felipebn commented 4 years ago

This is fixed on version v2.11.1 .