You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When using private directory services such as Azure AD B2C. Logging out of the current app session is not enough to log the user out of the session. By attempting to authenticate again the user is logged in without requesting a password.
Feathers should accept a logout_url and redirect the user to the url when logging out, additionally this would require the jwt to store which strategy was used to authenticate and use the appropriate logout_url.
As private directory services do not have additional means to logout a user we are required to implement this solution locally. Currently we redirect the user on the logout event, however this only works when you are using a single OAuth provider.
The text was updated successfully, but these errors were encountered:
When using private directory services such as Azure AD B2C. Logging out of the current app session is not enough to log the user out of the session. By attempting to authenticate again the user is logged in without requesting a password.
Feathers should accept a logout_url and redirect the user to the url when logging out, additionally this would require the jwt to store which strategy was used to authenticate and use the appropriate logout_url.
As private directory services do not have additional means to logout a user we are required to implement this solution locally. Currently we redirect the user on the logout event, however this only works when you are using a single OAuth provider.
The text was updated successfully, but these errors were encountered: