Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug]OIDC颁发的token失效后,页面能否失去登录态 #6094

Open
abel-liugz opened this issue Feb 13, 2025 · 9 comments
Open

[Bug]OIDC颁发的token失效后,页面能否失去登录态 #6094

abel-liugz opened this issue Feb 13, 2025 · 9 comments
Labels
🐛 Bug Something isn't working | 缺陷

Comments

@abel-liugz
Copy link

📦 部署环境

Docker

📌 软件版本

v1.49.12

💻 系统环境

Other Linux

🌐 浏览器

Chrome

🐛 问题描述

目前观察到,OIDC颁发的token失效后,页面仍然处于登录态,能否做到token失效,页面登出

📷 复现步骤

No response

🚦 期望结果

No response

📝 补充信息

No response

@abel-liugz abel-liugz added the 🐛 Bug Something isn't working | 缺陷 label Feb 13, 2025
@github-project-automation github-project-automation bot moved this to Roadmap - Chat 1.x in Lobe Chat Routine Feb 13, 2025
@lobehubbot
Copy link
Member

👀 @abel-liugz

Thank you for raising an issue. We will investigate into the matter and get back to you as soon as possible.
Please make sure you have given us as much context as possible.
非常感谢您提交 issue。我们会尽快调查此事,并尽快回复您。 请确保您已经提供了尽可能多的背景信息。

@lobehubbot
Copy link
Member

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿


📦 Deployment environment

Docker

📌 Software version

v1.49.12

💻 System environment

Other Linux

🌐 Browser

Chrome

🐛 Question description

It is currently observed that after the token issued by OIDC is invalid, the page is still in the login state. Can the token be invalid? The page logout

📷 Reproduction steps

No response

🚦 Expected results

No response

📝 Supplementary information

No response

Copy link

dosubot bot commented Feb 13, 2025

@abel-liugz 你好!我是Dosu,我是一个专注于解决问题、回答问题并帮助你成为贡献者的机器人。我会尽力帮助你,同时等待人类维护者的到来。

I found a similar unsolved discussion regarding the issue of maintaining login state after an OIDC token expires. You can view the discussion here [1].

Currently, there is no specific information available in the repository about automatically logging out users when their OIDC token expires. You might want to explore implementing a mechanism to check the token's validity periodically and log out the user if the token is no longer valid.

To continue talking to Dosu, mention @dosu.


Help Dosu learn! Give it feedback: Great Response | Irrelevant Answer | Incorrect Sources | Too Verbose | Hallucination | Other | Bug Report

@arvinxx
Copy link
Contributor

arvinxx commented Feb 13, 2025

@abel-liugz 之前有讨论 #3646 ,可以讨论下如果要做的话怎么做比较合适?

@lobehubbot
Copy link
Member

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿


@abel-liugz There was a discussion before #3646, so let’s discuss together how to do it if you want to do it?

@violet-il
Copy link

你有没有登录成功后退出登录再点登录他不会跳转账号密码输入页面而是直接登录

@lobehubbot
Copy link
Member

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿


Have you logged in successfully and logged out and then logged in, and will not jump to the password input page but log in directly

@cy948
Copy link
Contributor

cy948 commented Feb 13, 2025

OIDC 的登陆态和lobe应用的登录态没有绑定关系,OIDC的登录态只用于一次授权,用于链接lobe的账户。

@lobehubbot
Copy link
Member

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿


There is no binding relationship between the login state of OIDC and the login state of lobe application. The login state of OIDC is only used for authorization once and is used to link to the account of lobe.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🐛 Bug Something isn't working | 缺陷
Projects
Status: Roadmap - Chat 1.x
Development

No branches or pull requests

5 participants