oktadev / okta-node-express-example

A simple sample application built using Node and Express that contains user login, registration, and password reset functionality.
Apache License 2.0
17 stars 14 forks source link

Sign out doesn't clear session #2

Open idaWHALE opened 6 years ago

idaWHALE commented 6 years ago

When using the logout method, I am redirected to root but can still navigate back to same user dashboard. Sign in -> Log out -> url.com/dashboard still accessible

redbmk commented 6 years ago

There's an open issue for the Okta OIDC middleware.

I'm hopeful that the existing code will work once that issue is resolved, but I did post a possible (less than ideal) workaround in that thread.

SajithDeveloper commented 6 years ago

This issue still not resolved. Please provide a solution. Found a fix, redirect to https://dev-xxxxxx.oktapreview.com/oauth2/default/v1/logout?id_token_hint=xxxxx. But couldn't find id_token. This middle-ware is not providing the token in the req.