question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

[SameSite Cookie] Session not cleared on logout and unsolicited response Error

See original GitHub issue

I’ve setup a djangosaml2 application where I successfully can login using ADFS. When I logout I get no error but as soon as I go to the login page again I’m automatically signed in to the same user without any chance to change user.

I receive no error when logging out, I get a LogoutResponse with the following status so it doesn’t look like anything has gone wrong:

<samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" /></samlp:Status>

Is there something I must configure in the settings for djangosaml2 or is there something that must be done on the ADFS side?

Issue Analytics

  • State:closed
  • Created 4 years ago
  • Comments:30 (20 by maintainers)

github_iconTop GitHub Comments

1reaction
Rjevskicommented, Jul 30, 2020

Would you be able to submit a PR with your previous commit and put out a bug fix release on PyPi? Again submitting a public PR for this on my side might raise some intellectual property ownership concerns regarding my current contract so I’d prefer if you did it.

1reaction
peppelinuxcommented, Jul 30, 2020

@Rjevski I think that it would a good moment to get your contribution in a material PR 😃 Pleasure to work with you.

I’d should have also a geenral refactor of uniauth here: https://github.com/UniversitaDellaCalabria/uniAuth

take a look if you’re interested in a SAML2 IdP, I think that a skilled analyst as you would be important to keep closer 👍

Read more comments on GitHub >

github_iconTop Results From Across the Web

[SameSite Cookie] Session not cleared on logout and ... - GitHub
I've setup a djangosaml2 application where I successfully can login using ADFS. When I logout I get no error but as soon as...
Read more >
SameSite cookies - HTTP - MDN Web Docs
Cookie "myCookie" rejected because it has the "SameSite=None" attribute but is missing the "secure" attribute. This Set-Cookie was blocked ...
Read more >
Express clearCookie does not work as expected with options ...
If this cookie was already present at stage of request arrival and request must interact with session, this will update the session cookie...
Read more >
SimpleSAMLphp changelog
* Fix an issue with the SameSite cookie parameter when running on PHP versions older than 7.3 (#1320). adfs. * Fixed a broken...
Read more >
Work with SameSite cookies in ASP.NET Core | Microsoft Learn
The value SameSite=None is not allowed by the 2016 standard and causes some implementations to treat such cookies as SameSite=Strict . See ...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found