authgear / authgear/authgear-server

[Login, Fetch user info] Unexpected error/FormatException occurs upon sending "Fetch user info" requests with invalid SSO sessions

Open
#2,724 0 comments 0 reactions 0 assignees View on GitHub
bug/major reported by qa
Dominant language
Go
Stars
2k
Forks
125
Avg merge
2d 17h
Merged PRs (30d)
32

Description

bug major, reported by qa

**Describe the bug**
Unexpected error/FormatException occurs upon sending "Fetch user info" requests with invalid login sessions.

**Authgear Version**
- Version: Staging

**To Reproduce**
Steps to reproduce the behavior:
1. Log in to the project portal
2. Terminate the login sessions by 1) log out the SSO session from other devices, 2) terminate the session in the admin portal
3. Click the fetch user info API
4. See unexpected error / internal server error / format exception occurs on the demo app of Native / React Native / Flutter SDK

**Expected behavior**
Should show OAuthError or other invalid session error messages

**Screenshots**
![IMG_1121 1](https://user-images.githubusercontent.com/67095825/207029727-ad372e45-ab12-458e-b1f0-f7b3bb37b435.PNG)
![IMG_1122 1](https://user-images.githubusercontent.com/67095825/207029788-6cc28cca-851b-4a52-98f0-b972f0831a36.PNG)
![IMG_1123 1](https://user-images.githubusercontent.com/67095825/207029876-b36c9969-436a-4575-845f-bcf90678769e.PNG)

**Client Env (if applicable, please complete the following information):**
- Device: Samsung s21 FE, iPhone 11 Pro
- OS: win 11, Android 12, iOS 16
- Browser: Chrome
- Browser Version: 108.0.5359.99

Contributor guide

Open the contributing guide

Research direction

Start with the Fetch user info API flow in the Native, React Native, and Flutter demo apps and reproduce the request after terminating the SSO session. Trace how the invalid-session response is handled; done means the demos show OAuthError or another invalid-session message instead of an unexpected error, internal server error, or FormatException.

Written by the indexing model from the issue text.

Assessment

Tech stack
flutter, go, react-native
Domain
api, authentication, mobile-dev
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.