Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-32889

Fix Keycloak logout URI after multiple calls

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 2023.10
    • Fix Version/s: 2023.x, 2025.x
    • Component/s: Authentication
    • Release Notes Summary:
      Keycloak logout URI doesn't keep previous query parameters.
    • Backlog priority:
      700
    • Team:
      PLATFORM
    • Sprint:
      nxplatform #122, nxplatform #123, nxplatform #124
    • Story Points:
      3

      Description

      Pre-requisites: configure Keycloak and Nuxeo by following the configuration provided on NXP-32352

      Steps to reproduce:

      1. Navigate to Nuxeo http://localhost:8080/nuxeo
      2. The system redirects to Keycloak login page
      3. Use the credentials test/test
      4. The user "test" is successfully connected
      5. Open the Network tab in the Developer tools and filter on "logout"
      6. Log out from Nuxeo
      7. Observe the logout URL in the Network tab : it contains one time each parameter id_token_hint and post_logout_redirect_uri
      8. Log in again with the test user
      9. Log out again
      10. Observe the logout URL in the Network tab : it contains two times each parameter id_token_hint and post_logout_redirect_uri => this is the bug

      You can continue over and over until the logout URL will be too long and the logout will fail

      Expected behavior: the logout URL is built with each parameter only once

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: