Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[QA] no logout from identity provider possible #3872

Open
jnweiger opened this issue Jan 24, 2023 · 3 comments
Open

[QA] no logout from identity provider possible #3872

jnweiger opened this issue Jan 24, 2023 · 3 comments

Comments

@jnweiger
Copy link

jnweiger commented Jan 24, 2023

See with android App version ownCloud release Version 3.0.1 (5e553f0)

Actual behaviour

  • I have an owncloud server that requires login via keycloak idp (using the server openidconnect app version 2.2.0-rc.1)
  • Connect android app with the server, the IDP broweser window opens, I can choose a user and log in. OK
    grafik
  • Use the trashcan icon to delete the account again.
  • Connect again (without waiting more than 10 minutes)
    • The IDP immediately authorizes the app, without showing a user password dialog. BAD
    • There is no way to choose a differnet user for this server. BAD.
  • Wait 10 Minutes. Connect to the same server again.
    • A message appears saying my token is expired, I need to log in.
      photo_2023-01-24_19-13-26

  • Click "Einloggen" (log in). The app refreshes, again without asking for username or password and files are now accessible for the original user.
    photo_2023-01-24_19-13-33

  • Note, that the expired message remains at the bottom of the screen, and upload does not work. BAD.
  • have to click "Einloggen" again. After that, the message is gone and upload works. Okayish

Tell us what should happen.

  • when the account is removed, it should also be logged out from the IDP, so that any remainng session tokens are invalidated.
  • it should always be possible to choose the username, after entering a server URL.
@jnweiger
Copy link
Author

Workaround:
Log out, then wait until the next morning.
Connect to the same server again.
Now I get the complete login dialog with username and password from the IDP.

@michaelstingl
Copy link
Contributor

Not implemented yet. Needs support for OIDC frontchannel-, backchannel-, whateverchannel-logout in mobile and desktop apps…

@abelgardep
Copy link
Contributor

Related to this one? #3769

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants