search

mitreid-connect / OpenID-Connect-Java-Spring-Server

An OpenID Connect reference implementation in Java on the Spring platform.
Other
1.47k stars 767 forks source link

Puzzling behavior when using different webbrowser for client and server #1458

Closed rhinmass closed 5 years ago

rhinmass commented 5 years ago

I have the openid server running in tomcat on 8080, and the simple-web-app running in tomcat on 28080.

When I look at "Manage Active Tokens" from the server webapp I only see the tokens acquired by the simple-web-app client running in the same browser.

If I hit simple-web-app from IE and authenticate, those tokens are only visible on the server webapp in IE. And if I hit simple-web-app from Chrome, I only see those tokens on the server webapp running in Chrome. This doesn't seem right to me. If I have clients authenticating from remote locations, shouldn't I be able to manage their tokens? image

Chrome: image

IE: image

rhinmass commented 5 years ago

I think this was my misunderstanding of the Manage Tokens tab. I thought it was for the admin user to manage the tokens of other users, but now I realize that it is only for managing the tokens of the currently logged in user.