Humbedooh commented on issue #1337: URL: https://github.com/apache/tooling-trusted-releases/issues/1337#issuecomment-5037822717
The issue is in the oauth<->authentik part. The SSO cookie has a lifespan of the browser session, and using authentik's own end-session URL does not appear to remove the cookie, so while you are technically logged out of webmod (or whatever app), the next login is instantaneous due to the authentik session still being valid. We are looking at various options for automatically invalidating the previous session on the authentik-side when initiating a new login, -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
