AppAuth-Android icon indicating copy to clipboard operation
AppAuth-Android copied to clipboard

After uninstalling , installing and re-entering password I receive webpage with text "You are already logged In"

Open andysh0506 opened this issue 1 year ago • 1 comments

Checklist:

  • [x] I am using the latest release
  • [x] I searched for existing GitHub issues
  • [x] I read the documentation
  • [x] I verified the client configuration matches the information in the identity provider (or I am using dynamic client registration)
  • [x] I am either using a custom URI scheme or https with App Links for client redirect.
  • [ ] I can reproduce the issue in the demo app (optional)

Configuration

  • Version: 0.11.1
  • Integration: native(Java/Kotlin
  • Identity provider: KeyCloack

Issue Description

Log in the first time to the app, uninstall and install the app, and in the re-authentification screen enter your password and receive the webpage with the text "You are already logged In". Device Pixel 4a, Android 13. After pressing the logout button on the re-authentification screen receive the same page with "You are already logged In".

Request Code: AuthorizationRequest.Builder authRequestBuilder = new AuthorizationRequest.Builder( authState.getAuthorizationServiceConfiguration(), mClientId.get(), ResponseTypeValues.CODE, mConfiguration.getRedirectUri() ); authRequestBuilder .setScope(mConfiguration.getScope()) .setPrompt(AuthorizationRequest.Prompt.LOGIN); mAuthRequest.set(authRequestBuilder.build()); /

andysh0506 avatar Oct 19 '23 14:10 andysh0506

Your identity provider that hosts the login web page and auth flow can store the authstate in the browser cache - this allows for things like single sign on with many apps from the same company even if you uninstall one. It's up to them if they interpret prompt=login to force a password re-entry. They probably provide a logout api you'd need to call to invalidate the tokens. Uninstall and reinstall won't affect the browser's cache so you would also need to open your browser settings and clear it's saved data to experience a fresh install.

bsautner avatar Dec 12 '23 17:12 bsautner