web
web copied to clipboard
Multiple browser tabs send different refresh_token request with OpenID Connect at same interval
Steps to reproduce
- Use oCIS with openid connect with less refresh_token interval
- Open multiple oCIS tabs considering they share same browser's LocalStorage
- Inspect the requests in all these tabs for refresh_token
It is observed that a token response in 1 tab requests for refresh_token in another tab before the access_token expires at the same interval.
There must be token inspection & mutex used I guess while refresh_token request is sent!
Transferring to web ...
Seems to be an issue in the oidc-client-ts lib, see https://github.com/authts/oidc-client-ts/issues/430.