flyte icon indicating copy to clipboard operation
flyte copied to clipboard

[BUG] Flyte console refreshes often to re-authenticate

Open ALMerrill opened this issue 1 year ago • 5 comments

Describe the bug

When using the flyte console throughout the day, the console will often refresh and force me to log back in, several times per day. It seems like if I lose focus on the console page for more than 10-20 minutes, when I regain focus on that page, it refreshes. This seems excessive, and it sounds like there should be a way to have it refresh the auth token in the background.

Talking to @davidmirror-ops, I think this is the relevant section of my values file.

    auth:
      appAuth:
        thirdPartyConfig:
          flyteClient:
            clientId: flytectl
            redirectUri: http://localhost:53593/callback
            scopes:
              - offline
              - all
        selfAuthServer:
          staticClients:
            flyte-cli:
              id: flyte-cli
              redirect_uris:
              - http://localhost:53593/callback
              - http://localhost:12345/callback
              grant_types:
                - refresh_token
                - authorization_code
              response_types:
                - code
                - token
              scopes:
                - all
                - offline
                - access_token
              public: true
            flytectl:
              id: flytectl
              redirect_uris:
                - http://localhost:53593/callback
                - http://localhost:12345/callback
              grant_types:
                - refresh_token
                - authorization_code
              response_types:
                - code
                - token
              scopes:
                - all
                - offline
                - access_token
              public: true
            flytepropeller:
              id: flytepropeller
              client_secret: "${secret}"
              redirect_uris:
                - http://localhost:3846/callback
              grant_types:
                - refresh_token
                - client_credentials
              response_types:
                - token
              scopes:
                - all
                - offline
                - access_token
              public: false

Expected behavior

Ideally the token would refresh in the background logins would not be necessary after the initial login

Additional context to reproduce

This is hosted in GCP, using Google Identity for authentication

Screenshots

No response

Are you sure this issue hasn't been raised already?

  • [X] Yes

Have you read the Code of Conduct?

  • [X] Yes

ALMerrill avatar Feb 01 '24 17:02 ALMerrill