Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Account console v2 doesn't support automatic logout #23833

Closed
2 tasks done
mposolda opened this issue Oct 9, 2023 · 7 comments · Fixed by #28723
Closed
2 tasks done

Account console v2 doesn't support automatic logout #23833

mposolda opened this issue Oct 9, 2023 · 7 comments · Fixed by #28723

Comments

@mposolda
Copy link
Contributor

mposolda commented Oct 9, 2023

Before reporting an issue

Area

account/ui

Describe the bug

Scenario like:

  • Login to account console https://localhost:8443/admin/master/console/ in tab1. I did not enabled any preview features etc, so assume it is account console V2.
  • Open account console also in another browser tab (tab2). I should be logged automatically due the SSO and it works this way.
  • Click "Sign out" in tab2. I am logged-out, which is OK
  • Go to tab1. I am still logged-in here, which is not OK. When I click to some link (For instance tab "Personal info" on the left), I am redirected to login screen as SSO session was already removed, which is OK

Version

22.0.4 (or latest Keycloak main)

Expected behavior

Automatic logout in tab1 due the session iframe after user logged-out in tab2.

Actual behavior

Not being logged-out automatically in tab1 until I click on some link

How to Reproduce?

See above

Anything else?

Not 100% sure if this can be strictly considered a bug or missing functionality (feature). Also it is not a regression since old account console (Account console V1) was not based on javascript and automatic logout did not work here. So feel free to convert to "Feature" or "Enhancement".

@mposolda mposolda added kind/bug Categorizes a PR related to a bug status/triage labels Oct 9, 2023
@mposolda
Copy link
Contributor Author

mposolda commented Oct 9, 2023

For the reference: The same issue for new admin console #23832

@jonkoops
Copy link
Contributor

I believe this is also true for the v3 of the Account Console.

@ssilvert
Copy link
Contributor

@jonkoops I think we should only fix this for V3.

@keycloak-github-bot
Copy link

Due to the amount of issues reported by the community we are not able to prioritise resolving this issue at the moment.

If you are affected by this issue, upvote it by adding a 👍 to the description. We would also welcome a contribution to fix the issue.

@jonkoops
Copy link
Contributor

FYI this is still an issue in V3

@jonkoops jonkoops removed their assignment Apr 12, 2024
@edewit
Copy link
Contributor

edewit commented Apr 22, 2024

fixed with #28723

@ssilvert
Copy link
Contributor

@edewit Assigned to you for backport since you were the one who actually fixed it.

edewit added a commit to edewit/keycloak that referenced this issue Jul 9, 2024
Automatically forces the user to re-authenticate from the Admin and Account consoles when a single-logout occurs.

Closes keycloak#23832
Closes keycloak#23833

Signed-off-by: Erik Jan de Wit <[email protected]>
Signed-off-by: Jon Koops <[email protected]>
Co-authored-by: Jon Koops <[email protected]>
(cherry picked from commit 957859d)
edewit added a commit to edewit/keycloak that referenced this issue Jul 15, 2024
Automatically forces the user to re-authenticate from the Admin and Account consoles when a single-logout occurs.

Closes keycloak#23832
Closes keycloak#23833

Signed-off-by: Erik Jan de Wit <[email protected]>
Signed-off-by: Jon Koops <[email protected]>
Co-authored-by: Jon Koops <[email protected]>
(cherry picked from commit 957859d)
edewit added a commit to edewit/keycloak that referenced this issue Jul 19, 2024
Automatically forces the user to re-authenticate from the Admin and Account consoles when a single-logout occurs.

Closes keycloak#23832
Closes keycloak#23833

Signed-off-by: Erik Jan de Wit <[email protected]>
Signed-off-by: Jon Koops <[email protected]>
Co-authored-by: Jon Koops <[email protected]>
(cherry picked from commit 957859d)
edewit added a commit to edewit/keycloak that referenced this issue Jul 22, 2024
Automatically forces the user to re-authenticate from the Admin and Account consoles when a single-logout occurs.

Closes keycloak#23832
Closes keycloak#23833

Signed-off-by: Erik Jan de Wit <[email protected]>
Signed-off-by: Jon Koops <[email protected]>
Co-authored-by: Jon Koops <[email protected]>
(cherry picked from commit 957859d)
Signed-off-by: Erik Jan de Wit <[email protected]>
edewit added a commit that referenced this issue Jul 22, 2024
Automatically forces the user to re-authenticate from the Admin and Account consoles when a single-logout occurs.

Closes #23832
Closes #23833




(cherry picked from commit 957859d)

Signed-off-by: Erik Jan de Wit <[email protected]>
Signed-off-by: Jon Koops <[email protected]>
Co-authored-by: Jon Koops <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants