search

openshift / oauth-proxy

A reverse proxy that provides authentication with OpenShift via OAuth and Kubernetes service accounts
MIT License
261 stars 137 forks source link

How do you stop a browser from caching your credentials? #156

Closed Megan-Wright closed 3 years ago

Megan-Wright commented 4 years ago

When I use cookie-expire to cause a session timeout, and am redirected to the Openshift login page, all I am required to to do log back in is press the login button. This seems like odd behaviour, as I would expect to need to re-enter my openshift credentials into the browser in order to log back in.... how would I stop a browser from caching these pre-entered credentials in order to force a user to re-enter them every time they want to log in? @stlaz I've been advised you might be able to help with this?

openshift-bot commented 3 years ago

Issues go stale after 90d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle stale. Stale issues rot after an additional 30d of inactivity and eventually close. Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle stale

openshift-bot commented 3 years ago

Stale issues rot after 30d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle rotten. Rotten issues close after an additional 30d of inactivity. Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle rotten /remove-lifecycle stale

stlaz commented 3 years ago

@Megan-Wright you need to check the sessions at your IdP. You can now also configure --logout-url (https://github.com/openshift/oauth-proxy/pull/176) to log you out from your SSO as well so that whenever you try to re-login, you need to insert all your credentials again.

openshift-bot commented 3 years ago

Rotten issues close after 30d of inactivity.

Reopen the issue by commenting /reopen. Mark the issue as fresh by commenting /remove-lifecycle rotten. Exclude this issue from closing again by commenting /lifecycle frozen.

/close

openshift-ci-robot commented 3 years ago

@openshift-bot: Closing this issue.

In response to [this](https://github.com/openshift/oauth-proxy/issues/156#issuecomment-737111149): >Rotten issues close after 30d of inactivity. > >Reopen the issue by commenting `/reopen`. >Mark the issue as fresh by commenting `/remove-lifecycle rotten`. >Exclude this issue from closing again by commenting `/lifecycle frozen`. > >/close Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository.