RocketChat / RocketChat/Rocket.Chat
Personal Access Tokens are removed after SSO login
Open
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 46.1k
- Forks
- 13.9k
- Avg merge
- 3d 3h
- Merged PRs (30d)
- 130
Description
Description:
Personal Access Tokens are removed each time I log in with SSO.
Steps to reproduce:
- Log in with SSO/SAML (this is not reproducible with the login/password)
- Create a personal token
- Log out
- Log in again.
- Check your personal access tokens. All of them are removed now
Expected behavior:
Personal Access Tokens are not removed each time I log in with SSO.
Actual behavior:
Please see screen recording
Server Setup Information:
- Version of Rocket.Chat Server: 4.1.0
- Operating System: Ubuntu 20.04
- Deployment Method: docker
- Number of Running Instances: 1
- NodeJS Version: v12.22.1
- MongoDB Version: 4.0.20 / mmapv1 (oplog Enabled)
Relevant logs:
There is nothing related in logs.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the SSO/SAML login flow described in the issue, recording the personal access token before logging out and after logging in again. Trace the authentication flow to find where tokens are removed during SSO, then verify that tokens persist across repeated SSO logins without affecting password login.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- authentication
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100