syncweek-react-aad / react-aad

A React wrapper for Azure AD using the Microsoft Authentication Library (MSAL). The easiest way to integrate AzureAD with your React for authentication.
MIT License
345 stars 94 forks source link

Able to login without asking for user credentials in unauthenticated state in certain scenerio #259

Open suhadev opened 4 years ago

suhadev commented 4 years ago

Library versions

Describe the bug when authentication state is unauthenticated, in some scenerio triggering login function, the application logs in without asking for user credentials.

Expected behavior Whenever Authentication state is unauthenticated, triggering the login function should ask for user credentials.

To Reproduce Steps to reproduce the behavior:

  1. Logout the application
  2. It will Navigate to microsoft url asking,"Which account Do you want to Sign out of ?"
  3. close the window without choosing an account
  4. Login to application now in a new window. authentication state will be unauthenticated.
  5. The application logs in without asking for credentials.

Desktop (please complete the following information):

cicorias commented 4 years ago

In step 3 can you ensure all chrome processes are not showing “ps aef” or “top”.