bcgov / bcgov/mobile-authentication-ios

SSO fails initial logon after logout or expired token

Open
#6 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Swift
Stars
2
Forks
3
PR merge metrics
No merged PRs in 30d

Description

If you're logged in with this component then logout, the subsequent login fails. This could be related to the way SSO interacts with site minder for authentication and, in general, how a authentication federation service works. To logout, we need to call back to site minders logout to ensure all sessions are expired.

Contributor guide

Open the contributing guide

Research direction

Start by tracing the iOS component's logout and subsequent initial-login flow, then review how SiteMinder and the authentication federation service handle expired sessions or tokens. The logout path should call SiteMinder logout so all sessions expire, and a login after logout or token expiry should succeed.

Written by the indexing model from the issue text.

Assessment

Tech stack
ios, swift
Domain
authentication, mobile-dev
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.