Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Full Logout not working with multiple clients #2

Open
Asifislam110 opened this issue Jan 31, 2019 · 2 comments
Open

Full Logout not working with multiple clients #2

Asifislam110 opened this issue Jan 31, 2019 · 2 comments

Comments

@Asifislam110
Copy link

when one user logout from one client , same user can continue to use the protected data of second client.
need help.

@damienbod
Copy link
Owner

google oidc does not support logout...

Use a different token service for this use case, for example you could put a identityserver4 in between.

Greetings Damien

@Asifislam110
Copy link
Author

@damienbod thank you for your reply.
I am using identityserver3 with below client setting

CLIENT 1:
new Client
{
Enabled = true,
ClientName = "Client1",
ClientId = "Client1",
AccessTokenType = AccessTokenType.Reference,
Flow = Flows.Implicit,
ClientSecrets = new List { new Secret { Value="Client1"} },
RequireConsent = false,

            RedirectUris = new List<string>
            {
                "http://localhost:28650/"
            },
            AllowedCorsOrigins = new List<string>
            {
               "http://localhost:28650/"
            },
            // Valid URLs after logging out
            PostLogoutRedirectUris = new List<string>
            {
                "http://localhost:28650/"
            },

            AllowAccessToAllScopes = true,
            AccessTokenLifetime =  3600
        }

CLIENT 2 :

			new Client
        {
            Enabled = true,
            ClientName = "Client2",
            ClientId = "Client2",
             AccessTokenType = AccessTokenType.Reference,
            Flow = Flows.Implicit,
            ClientSecrets = new List<Secret> { new Secret { Value="Client2"} },
            RequireConsent = false,


            RedirectUris = new List<string>
            {
                "localhost:28550"
            },
            AllowedCorsOrigins = new List<string>
            {
               "localhost:28550"
            },
            // Valid URLs after logging out
            PostLogoutRedirectUris = new List<string>
            {
                "localhost:28550"
            },

            AllowAccessToAllScopes = true,
            AccessTokenLifetime =3600
        }

when i logout from client 1 it sucessfully logout and redirect to login, but when i move to client 2 it can still access/use client 2 application.
can you please guide me how to resolve this issue.
Thanks,

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants