end session not working

[MansoorJafari9]

Hi after I call end session method for signout user, web page opens and when I log in again web page opens instead of the app open and when I open the application again user signs in in advanced when I update the Flutter app auth form 5. x.x to 6. x.x this issue appears

    await appAuth.endSession(new EndSessionRequest(      
        idTokenHint: token.idToken,
        postLogoutRedirectUrl: postLogoutRedirectUrl,
        serviceConfiguration: AuthorizationServiceConfiguration(authorizationEndpoint: AuthorizationEndpoint, tokenEndpoint: TokenEndpoint, endSessionEndpoint: EndSessionEndpoint)));
    print("end session");

and I want to know into this part

              android:host="<your_custom_host>"/> ``` 
what value should I set for <your_custom_host>
              

[MansoorJafari9]

please help

[mablds]

It happened with me too. I had to made a manual request to my OAuth provider to solve it in an alternative way...

[MaikuB]

End session method is meant to be used to log out so logging in again causing a web page to open is expected so what you've been describing is to be expected.

what value should I set for <your_custom_host>

You'll need to familiarise yourself with the structure of a URI. See https://en.wikipedia.org/wiki/Uniform_Resource_Identifier#Syntax

[MansoorJafari9]

@MaikuB I know when the user call end session method when logging out and web page open again and user has to login again. I have a problem whit this part. why login page opens again and I close app and open it again user logged in in advanced.

[MaikuB]

I'm not following trying to describe here. If you believe there's a bug, are you able to fork the repo and update the example to demonstrate this? Something to bear in mind is that managing access tokens is separate from the plugin. Apps will typically manage the tokens (e.g. using https://pub.dev/packages/flutter_secure_storage) and if the user has logged out, it's your application's responsibility to remove the tokens. Right now, I would guess that you aren't doing that and this is why the next time that app was opened that the user was considered logged in despite how they logged themselves out

[7685]

Facing the same issue on Android. iOS works fine though. When the user logs out and logs in again, the login screen does not appear and user gets auto-logged in.

[rexmihaela]

Facing the same issue on Android. iOS works fine though. When the user logs out and logs in again, the login screen does not appear and user gets auto-logged in.

I'm facing this issue as well. Android only. iOS works as expected.

[MeltdownInteractive]

To fix this issue, make sure you set promptValues to login when getting the token. This way, it will always make sure to show the login screen instead of just providing new tokens automatically.

FlutterAppAuth appAuth = const FlutterAppAuth();
    
    var result = await appAuth.authorizeAndExchangeCode(
      AuthorizationTokenRequest(
          Constants.b2cClientIdentifier,
          Constants.b2cRedirectUrl,
          discoveryUrl: Constants.b2cDiscoveryEndpoint,
          scopes: Constants.b2cScopes.split(','),
          promptValues: ['login']
      ),
    );