Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Logging out of OpenID provider doesn't actually log you out of it #12374

Closed
1 of 7 tasks
mohe2015 opened this issue Jul 29, 2020 · 2 comments
Closed
1 of 7 tasks

Logging out of OpenID provider doesn't actually log you out of it #12374

mohe2015 opened this issue Jul 29, 2020 · 2 comments

Comments

@mohe2015
Copy link
Contributor

  • Gitea version (or commit ref): 1.12.2
  • Git version: 2.20.1
  • Operating system: Raspberry Pi OS 64-bit (Debian Buster)
  • Database (use [x]):
    • PostgreSQL
    • MySQL
    • MSSQL
    • SQLite
  • Can you reproduce the bug at https://try.gitea.io:
    • Yes (provide example URL)
    • No
    • Not relevant
  • Log gist:

Description

If you login to gitea using an OpenID provider (Keycloak in my case) and then log out again you seem to be logged out. But if you click on the OpenID login you will be automatically logged back into the same account. I think you should also be deauthenticated from that account and not only from gitea.

@stale
Copy link

stale bot commented Sep 28, 2020

This issue has been automatically marked as stale because it has not had recent activity. I am here to help clear issues left open even if solved or waiting for more insight. This issue will be closed if no further activity occurs during the next 2 weeks. If the issue is still valid just add a comment to keep it alive. Thank you for your contributions.

@stale stale bot added the issue/stale label Sep 28, 2020
@mohe2015
Copy link
Contributor Author

As far as I remember the issue is that OpenID doesn't support explicit logouts and Keycloak doesn't allow you to easily switch users.

@go-gitea go-gitea locked and limited conversation to collaborators Nov 24, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

1 participant