Skip to content
Snippets Groups Projects
Forked from Platform / Development / swh-auth
56 commits behind the upstream repository.
  • Antoine Lambert's avatar
    508b476d
    django/backends: Handle error when user session is no longer active · 508b476d
    Antoine Lambert authored
    When a user session has been terminated without using the logout view
    (for instance a user can logout from all its authenticated sessions
    using the Keycloak account UI), the expired OIDC profile is still
    in webapp cache which causes errors and prevent new user logins.
    
    So ensure to remove expired profile from cache when detecting Keycloak
    session is no longer active in django authentication backend.
    
    Related to T3496
    508b476d
    History
    django/backends: Handle error when user session is no longer active
    Antoine Lambert authored
    When a user session has been terminated without using the logout view
    (for instance a user can logout from all its authenticated sessions
    using the Keycloak account UI), the expired OIDC profile is still
    in webapp cache which causes errors and prevent new user logins.
    
    So ensure to remove expired profile from cache when detecting Keycloak
    session is no longer active in django authentication backend.
    
    Related to T3496
test_backends.py 10.32 KiB