hashicorp / hashicorp/boundary

Boundary Desktop oauth expiration behavior

Open
#1,997 1 comment 4 reactions 0 assignees View on GitHub
triage
Dominant language
Go
Stars
4.1k
Forks
317
Avg merge
5h 10m
Merged PRs (30d)
1

Description

**Describe the bug**
When using Boundary Desktop with a oidc auth method if you delete the oidc session token or let it expire it drops you into a 403 permission page. If a user click the dropdown and deauthenticates it gives you an option to reauth but I have clicked the disconnect button most of the time forcing me to readd boundary server and then reauth. Ideally when the token expires it should just drop you into that login page without user interaction.

**To Reproduce**
Steps to reproduce the behavior:
1. Using a bounday oauth method login to boundary desktop
2. let the session expire or delete session in oidc provider
3. Boundary Desktop shows permission page

**Expected behavior**
Ideally when the token expires it should just drop you into that login page without user interaction.

**Additional context**
[Add any other context about the problem here.](https://discuss.hashicorp.com/t/boundary-desktop-oauth-expiration/38247)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.