Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

After uninstalling , installing and re-entering password I receive webpage with text "You are already logged In" #1015

Open
5 of 6 tasks
andysh0506 opened this issue Oct 19, 2023 · 1 comment
Labels

Comments

@andysh0506
Copy link

andysh0506 commented Oct 19, 2023

Checklist:

  • I am using the latest release
  • I searched for existing GitHub issues
  • I read the documentation
  • I verified the client configuration matches the information in the identity provider (or I am using dynamic client registration)
  • I am either using a custom URI scheme or https with App Links for client redirect.
  • I can reproduce the issue in the demo app (optional)

Configuration

  • Version: 0.11.1
  • Integration: native(Java/Kotlin
  • Identity provider: KeyCloack

Issue Description

Log in the first time to the app, uninstall and install the app, and in the re-authentification screen enter your password and receive the webpage with the text "You are already logged In". Device Pixel 4a, Android 13.
After pressing the logout button on the re-authentification screen receive the same page with "You are already logged In".

Request Code:
AuthorizationRequest.Builder authRequestBuilder =
new AuthorizationRequest.Builder(
authState.getAuthorizationServiceConfiguration(),
mClientId.get(),
ResponseTypeValues.CODE,
mConfiguration.getRedirectUri()
);
authRequestBuilder
.setScope(mConfiguration.getScope())
.setPrompt(AuthorizationRequest.Prompt.LOGIN);
mAuthRequest.set(authRequestBuilder.build());
/

@andysh0506 andysh0506 added the bug label Oct 19, 2023
@bsautner
Copy link

Your identity provider that hosts the login web page and auth flow can store the authstate in the browser cache - this allows for things like single sign on with many apps from the same company even if you uninstall one. It's up to them if they interpret prompt=login to force a password re-entry. They probably provide a logout api you'd need to call to invalidate the tokens. Uninstall and reinstall won't affect the browser's cache so you would also need to open your browser settings and clear it's saved data to experience a fresh install.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants