-
Notifications
You must be signed in to change notification settings - Fork 22
fix: added logout user before sso pipeline starts #402
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: added logout user before sso pipeline starts #402
Conversation
|
@Akanshu-2u changes look good, can you bump the version of the library so that we can do a release once we merge this? |
Addressed. Added version bump of the library. Thank you. |
|
Thanks @feanil. |
|
@feanil: We'll see if we can get this fully tested and rolled out (on by default) for Ulmo on Oct 9. |
Description:
Users logging in through OAuth SSO could retain session data from previous logins, creating potential security risks and confusion when switching between accounts.
Solution:
Added
logout(request)call inEdXOAuth2.start()method to clear existing sessions before OAuth authentication begins.JIRA:
BOMS-3
Note: