search

ging / fiware-idm

OAuth 2.0-based authentication of users and devices, user profile management, Single Sign-On (SSO) and Identity Federation across multiple administration domains.
https://keyrock-fiware.github.io
MIT License
36 stars 81 forks source link

OAuth2 request fail when user has logged out #313

Open nikosft opened 1 year ago

nikosft commented 1 year ago

I am running IdM from docker, ver 8.3.2 and I interact with Safari on Mac. I have logged in and logged out several times. At some point, when logged out the following request

http://localhost:3005/oauth2/authorize?response_type=code&client_id=c10a0098-9c32-4b37-8f22-d46845c6b1cd&state=xyz&scope=openid&redirect_uri=https%3A%2F%2Fexample%2Ecom

Fails with the following error

ops! something went wrong!
contact with the administrators of Test application and send your error details
OAuth2 request has failed!
error - /opt/fiware-idm/views/oauth/index.ejs:16 14| <div class=alternative_login> 15| <div class="row"> >> 16| <%- include(login)%> 17| <%- include(presentation)%> 18| </div> 19| </div> /opt/fiware-idm/views/oauth/_login.ejs:8 6| <input type='hidden' name='_csrf' value='<%= csrf_token%>' /> 7| <div class="modal-body clearfix"> >> 8| <% if (errors.indexOf("sessionExpired") != -1) { %> 9| <span class="help-block alert alert-warning"><p><%=translation.oauth.login.alert01%></p></span> 10| <% } %> 11| <% if (errors.indexOf("user_not_found") != -1 || errors.indexOf("invalid") != -1) { %> errors.indexOf is not a function

(see also screenshot)

image

If I logged in the request works as expected. Moreover in an private windows the request works as expected (even if I am logged out)