search

gardner / react-oauth2-pkce

React auth provider that works with AWS cognito PKCE🛡️🔒
49 stars 57 forks source link

Added possibility to end user session on "Single Application Logout". #26

Closed t-knapp closed 2 years ago

t-knapp commented 2 years ago

We ran into a problem with "pending" sessions of a prior logged in user after logout. This relates to the fact that the logout call removes local auth infos only. So I added the possibility to end a users session when calling logout. You can configure the logout endpoint if you use a different or custom id provider.

Only works in "Single Application Logout" scenarios. Global logout with multiple applications is not considered now. Reference: https://medium.com/@robert.broeckelmann/openid-connect-logout-eccc73df758f

Kind regards, Tobias

Booyaabes commented 2 years ago

We have the same problem with Keycloak as IDP. Do you plan to merge it soon ?

Booyaabes commented 2 years ago

I have made some tests, and it worked as expected.