AppAuth-Android
AppAuth-Android copied to clipboard
After uninstalling , installing and re-entering password I receive webpage with text "You are already logged In"
Checklist:
- [x] I am using the latest release
- [x] I searched for existing GitHub issues
- [x] I read the documentation
- [x] I verified the client configuration matches the information in the identity provider (or I am using dynamic client registration)
- [x] I am either using a custom URI scheme or
https
with App Links for client redirect. - [ ] I can reproduce the issue in the demo app (optional)
Configuration
- Version: 0.11.1
- Integration: native(Java/Kotlin
- Identity provider: KeyCloack
Issue Description
Log in the first time to the app, uninstall and install the app, and in the re-authentification screen enter your password and receive the webpage with the text "You are already logged In". Device Pixel 4a, Android 13. After pressing the logout button on the re-authentification screen receive the same page with "You are already logged In".
Request Code: AuthorizationRequest.Builder authRequestBuilder = new AuthorizationRequest.Builder( authState.getAuthorizationServiceConfiguration(), mClientId.get(), ResponseTypeValues.CODE, mConfiguration.getRedirectUri() ); authRequestBuilder .setScope(mConfiguration.getScope()) .setPrompt(AuthorizationRequest.Prompt.LOGIN); mAuthRequest.set(authRequestBuilder.build()); /
Your identity provider that hosts the login web page and auth flow can store the authstate in the browser cache - this allows for things like single sign on with many apps from the same company even if you uninstall one. It's up to them if they interpret prompt=login to force a password re-entry. They probably provide a logout api you'd need to call to invalidate the tokens. Uninstall and reinstall won't affect the browser's cache so you would also need to open your browser settings and clear it's saved data to experience a fresh install.