re-login

[higuchi-toshio-intec]

Very thanks for your project.
My execution environment is built with these versions.

• AWS Fargate
  • CKAN [2.9.5]
  • ckanext-oauth2 [0.7.0]
• Amazon ELB (for "https" front-end listener)
• Amazon Cognito

I hava questions for re-login.

I operated my browser like these.

1. I browsed my CKAN top page.
2. I clicked "Log in". My browser displayed "sign in dialog".
3. I entered "Username" and "Password" and click "Sign in".
4. I got success logged in.
5. I Clicked "Logout". My browser displayed "Logged Out" message.
6. I clicked "Log in" again.
7. I got success logged in WITHOUT sign in dialog.

Is this behavior normal?

What should I do if I want to log in with a different account?

regards

[aitormagan]

Take into account that when logging out, your are just closing the CKAN session, but no the IdP one. Because of this, when you click on log in, you are redirected to the IdP, and there, you are redirected straightaways to your CKAN instance, as the IdP has an active account and there is no need to ask for credentials. If you want to log in in a new account, you should log out in your IdP before trying to log in again in CKAN. Br Aitor Magán García

…

El 31 ago 2022, a las 6:28, higuchi-toshio-intec ***@***.***> escribió:  Very thanks for your project. My execution environment is built with these versions. AWS Fargate CKAN [2.9.5] ckanext-oauth2 [0.7.0] Amazon ELB (for "https" front-end listener) Amazon Cognito I hava questions for re-login. I operated my browser like these. I browsed my CKAN top page. I clicked "Log in". My browser displayed "sign in dialog". I entered "Username" and "Password" and click "Sign in". I got success logged in. I Clicked "Logout". My browser displayed "Logged Out" message. I clicked "Log in" again. I got success logged in WITHOUT sign in dialog. Is this behavior normal? What should I do if I want to log in with a different account? regards — Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you are subscribed to this thread.

[hbadri3]

Yeah, this the meaning of SSO. You can reproduce this behavior (healthy actually) when you log in to a website through google, you will get the same flow, so you need to logout from google if you like to request authentication in your website.
As a workaround you might implement the revoke token of your Idb in you extension (customized)