OIDC - login using HTTP callback should allow 'auto-close' to keep browser sessions clean

[plejd-sebman]

Is your feature request related to a problem? Please describe.
We are using Vault provider in Terraform and OIDC for authentication. Every terraform plan attempt is generating a new tab in our browser session that after a while creates a messy browser window.

Describe the solution you'd like
Provide an 'auto-close' feature that can be enabled both in Terraform provider as well as in the CLI tool.

Describe alternatives you've considered
Manually closing tenth of browser tabs.

Explain any additional use-cases
None

Additional context
None

[heatherezell]

Which UI is generating these windows? Is it the Vault UI? Thanks!

[mfriedenhagen]

Just stumbled upon this as well. In the morning I login from the CLI to 4 systems using OIDC. While the others close the browser tab after acknowledging, the vault tab stays open. I am on macOS. Not that annoying as for the reporter only a bit.
One of the CLI tools is self-written in go and the solution could be to add

<script>window.close();</script>

to the HTML page when someone adds the auto-close flag.

[mfriedenhagen]

This is the web-page in the browser.

[ZirongCai]

same here. we are using a script to spawn a docker image which at the beginning always tries to get some secrets from vault and mount to the docker image. it is quite annoying if vault does not close the window automatically... sometimes even ended up with 10 windows opened