Automatically re-authenticate on single-logout (keycloak#28723) (keyc…

…loak#31154)

Automatically forces the user to re-authenticate from the Admin and Account consoles when a single-logout occurs.

Closes keycloak#23832
Closes keycloak#23833




(cherry picked from commit 957859d)

Signed-off-by: Erik Jan de Wit <[email protected]>
Signed-off-by: Jon Koops <[email protected]>
Co-authored-by: Jon Koops <[email protected]>

js/apps/account-ui/src/root/KeycloakContext.tsx

@@ -41,29 +41,30 @@ export const KeycloakProvider = ({
   const calledOnce = useRef(false);
   const [init, setInit] = useState(false);
   const [error, setError] = useState<unknown>();
-  const keycloak = useMemo(
-    () =>
-      new Keycloak({
-        url: environment.authUrl,
-        realm: environment.realm,
-        clientId: environment.clientId,
-      }),
-    [environment],
-  );
+  const keycloak = useMemo(() => {
+    const keycloak = new Keycloak({
+      url: environment.authUrl,
+      realm: environment.realm,
+      clientId: environment.clientId,
+    });
+
+    keycloak.onAuthLogout = () => keycloak.login();
+
+    return keycloak;
+  }, [environment]);
 
   useEffect(() => {
     // only needed in dev mode
     if (calledOnce.current) {
       return;
     }
 
-    const init = () => {
-      return keycloak.init({
+    const init = () =>
+      keycloak.init({
         onLoad: "check-sso",
         pkceMethod: "S256",
         responseMode: "query",
       });
-    };
 
     init()
       .then(() => setInit(true))

js/apps/admin-ui/src/keycloak.ts

@@ -8,6 +8,8 @@ export const keycloak = new Keycloak({
   clientId: environment.clientId,
 });
 
+keycloak.onAuthLogout = () => keycloak.login();
+
 export async function initKeycloak() {
   const authenticated = await keycloak.init({
     onLoad: "check-sso",