openid / AppAuth-JS

JavaScript client SDK for communicating with OAuth 2.0 and OpenID Connect providers.
Apache License 2.0
975 stars 162 forks source link

IFrame Support #185

Closed AbhiAgarwal192 closed 3 years ago

AbhiAgarwal192 commented 3 years ago

Expected Behavior

[REQUIRED] Describe expected behavior

Describe the problem

If you have two apps and user 1 logged in on app 1 and on another tab in the same browser instance user 1 again opens app1 and logs out. In this case, he/she should be logged out from both the tabs.

[REQUIRED] Actual Behavior

[REQUIRED] Steps to reproduce the behavior

[REQUIRED] Environment

OpenID configuration has an attribute check_session_iframe. The module is currently not making use of this property.

tikurahul commented 3 years ago

The goal of the library was to never implement every feature of the spec. This is something we did not want to support as the library wants to be a bit agnostic to the Javascript runtime you are using. You can however, add this extension on your own.