Skip to content

fix: stale user and data issue on SSO logout#564

Open
emrberk wants to merge 2 commits into
mainfrom
fix/sso-cleanup-on-logout
Open

fix: stale user and data issue on SSO logout#564
emrberk wants to merge 2 commits into
mainfrom
fix/sso-cleanup-on-logout

Conversation

@emrberk
Copy link
Copy Markdown
Collaborator

@emrberk emrberk commented May 22, 2026

These co-existed in Web Console:

  • Web Console only changes the view from Ready to Login, to show the login screen
  • When a user logs in via SSO and logs out afterwards, Web Console keeps the client id to provide Continue as ... option, to perform single-click login.
  • Web Console was automatically running Oauth flow on app start, if it finds a client id, but not a token.

As a result, whether the user has logged out or not, page refreshes were resulting in auto-login. This PR:

  • Adds an explicit flag SSO_SESSION_ACTIVE that is set to false when the user logs out, to prevent auto-login of a user on page refresh.
  • Adds auto-refresh for the page on logout to clear stale information from previous user's session (e.g. grid results), not to leak into the next login.
  • Adds --cached flag to enterprise test script not to clone and build the codebase in every run.
  • Requires Java 25 in the test script, and auto-finds the JDK if it can.

@emrberk emrberk requested a review from glasstiger May 22, 2026 15:09
Comment thread e2e/tests/enterprise/oidc.spec.js
Comment thread e2e/tests/enterprise/oidc.spec.js
Comment thread e2e/tests/enterprise/oidc.spec.js
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant