Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Terminate 3rd party session after log out #2275

Open
infomiho opened this issue Sep 10, 2024 · 1 comment
Open

Terminate 3rd party session after log out #2275

infomiho opened this issue Sep 10, 2024 · 1 comment
Labels

Comments

@infomiho
Copy link
Contributor

After a user logs out in Wasp, for some OAuth providers, it's necessary to terminate the 3rd party session as well. We could do this as a generic "log out clean up" hook that we perform for some of the OAuth providers e.g. Keycloak needs this. We would need to improve our log out action to send a request to the server on log out as well.

Related Discord question: https://discord.com/channels/686873244791210014/1283013159598428181/1283013159598428181

@infomiho infomiho added the auth label Sep 10, 2024
@infomiho
Copy link
Contributor Author

  1. Wasp should send a /logout request from the client to the server to log out the user (invalidate the session in the DB)
  2. Wasp should (for some providers) have some extra logic e.g. doing some API calls to the provider
  • This requires us to know which provider was used with which session.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant