nextauthjs / next-auth

Authentication for the Web.
https://authjs.dev
ISC License
24.95k stars 3.52k forks source link

Auth0 can't sign out #8976

Closed domlen2003 closed 1 year ago

domlen2003 commented 1 year ago

Provider type

Auth0

Environment

System:

Reproduction URL

https://github.com/domlen2003/cf-auth0-drizzle-sveltekit-example

Describe the issue

When signin in everything works as intended, but signout doesn't remove the cookies from Auth0. So when signing in again (directly after a signout) the user never sees the Auth0 site because the cookie still exist and Auth0 automatically uses it for granting a code again.

How to reproduce

Configure a (SvelteKit) project with Auth0 as the only provider. Then signin, signout and signin again. The second signing wont bring you to the Auth0 signin screen but rather signin directly (as if you were never signed out and just refreshed).

Expected behavior

After a signout the user should always be displayed with the signin options again. E.g. forgot password or change account is only possible this way.

balazsorban44 commented 1 year ago

This is currently expected, as we don't support federated logouts out of the box yet, although it's possible to achieve. See #836