authorize() caches credentials
See original GitHub issueIssue
IOS+Android issue. authorize() automatically logs users in WITHOUT ASKING FOR CREDENTIALS (for the 2nd time)
Environment
- Your Identity Provider:
IdentityServer 4
- Platform that you’re experiencing the issue on:
both
- Are you using Expo?
No
- “react-native-app-auth”: “^6.2.0”,
System: OS: macOS 10.15.7 CPU: (12) x64 Intel® Core™ i9-8950HK CPU @ 2.90GHz Memory: 307.18 MB / 32.00 GB Shell: 5.7.1 - /bin/zsh Binaries: Node: 14.13.1 - /usr/local/bin/node Yarn: 1.22.10 - /usr/local/bin/yarn npm: 6.14.8 - /usr/local/bin/npm Watchman: 4.9.0 - /usr/local/bin/watchman Managers: CocoaPods: 1.10.1 - /Users/myusername/.rvm/rubies/ruby-2.6.3/bin/pod SDKs: iOS SDK: Platforms: iOS 14.2, DriverKit 20.0, macOS 11.0, tvOS 14.2, watchOS 7.1 Android SDK: API Levels: 16, 23, 27, 28, 29, 30 Build Tools: 28.0.3, 29.0.2, 29.0.3, 30.0.2 System Images: android-29 | Google APIs Intel x86 Atom, android-29 | Google Play Intel x86 Atom Android NDK: 21.3.6528147 IDEs: Android Studio: 4.1 AI-201.8743.12.41.7042882 Xcode: 12.2/12B45b - /usr/bin/xcodebuild Languages: Java: 1.8.0_222 - /usr/bin/javac Python: 2.7.16 - /usr/bin/python npmPackages: @react-native-community/cli: Not Found react: 16.11.0 => 16.11.0 react-native: 0.62.2 => 0.62.2
const OAuthConfig: AuthConfiguration = {
serviceConfiguration: {
authorizationEndpoint: 'https://id.myserver.com/oauth2/authorize',
tokenEndpoint: 'https://id.myserver.com/oauth2/token/',
revocationEndpoint,
},
clientId: 'MY_CLIENT_ID',
clientSecret: 'MY_CLIENT_SECRET',
redirectUrl: 'myApp://oauth',
scopes: ['introspection', 'profile:read'],
additionalParameters: { prompt: 'login' },
}
If I logout, for the next login I’m not asked to enter credentials and I’m being logged in automatically. We don’t want this to happen - instead we want to ask user enter credentials every time
Issue Analytics
- State:
- Created 2 years ago
- Reactions:1
- Comments:18
Top GitHub Comments
My update After few research I’ve discovered this ISSUE related to OIDC: https://github.com/openid/AppAuth-iOS/issues/542
I’ve seen this ISSUE and @kuznetsov-from-wonderland has this parameter in his configuration, I’m referring to this:
additionalParameters: { prompt: 'login' },
I’ve added this to my OIDC configuration and I can confirm that everything is working OK. I’m able to execute login/logout with re-entering credentials. Hope my experience can help you too.
My configuration:
@RoBYCoNTe solution fixed the issue for me.