elsa-workflows / elsa-workflows/elsa-studio
Expired token does not redirect to login (OIDC)
- Dominant language
- C#
- Stars
- 301
- Forks
- 181
- Avg merge
- 17h 12m
- Merged PRs (30d)
- 42
Description
I am using ELSA with IdentityServer4 as IDP. I have for testing purposes set a short expiration on my access token.
When token expires it will call IDP and it returns a token. However tokenProvider.RequestAccessToken in WasmTokenProvider does not return a token and TokenResult.Status = RequiresRedirect
I have also noticed expiration problems with built in ElsaIdentity before. It will give an error rather than returning you to login page if token / session has expired.
Contributor guide
Research direction
Start by tracing WasmTokenProvider.RequestAccessToken and the handling of TokenResult.Status = RequiresRedirect. Compare that flow with the built-in ElsaIdentity behavior when the token or session expires. Done means an expired OIDC token or session returns the user to the login page instead of producing an error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- authentication
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100