elsa-workflows / elsa-workflows/elsa-studio

Expired token does not redirect to login (OIDC)

Open
#905 1 comment 0 reactions 0 assignees View on GitHub
triaged
Dominant language
C#
Stars
301
Forks
181
Avg merge
17h 12m
Merged PRs (30d)
42

Description

I am using ELSA with IdentityServer4 as IDP. I have for testing purposes set a short expiration on my access token.

When token expires it will call IDP and it returns a token. However tokenProvider.RequestAccessToken in WasmTokenProvider does not return a token and TokenResult.Status = RequiresRedirect

I have also noticed expiration problems with built in ElsaIdentity before. It will give an error rather than returning you to login page if token / session has expired.

Contributor guide

Open the contributing guide

Research direction

Start by tracing WasmTokenProvider.RequestAccessToken and the handling of TokenResult.Status = RequiresRedirect. Compare that flow with the built-in ElsaIdentity behavior when the token or session expires. Done means an expired OIDC token or session returns the user to the login page instead of producing an error.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
authentication
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.