Skip to content

User session not cleaned from Keycloak when unauthorized #233

@sbanoeon

Description

@sbanoeon

User session is still active when verify_claims() is returning False, the corresponding issue can be followed here from the library.

If the library does not support this workflow, we need to find a way to clear the user session from Keycloak when the user is unauthorized. The existing provider_logout() can not be used directly since a view can not be directly called from the inherited class CustomOIDCAB.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingon holdNot prioritised

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions