nodeSolidServer / nodeSolidServer/node-solid-server

Get automatically re-logged-in without

未关闭
#1,503 3 条评论 1 个 reaction 已指派 0 人 在 GitHub 查看

还没有人认领这个 Issue。

主要语言
JavaScript
星标
1.8k
派生
308
PR 合并指标
30 天内没有已合并 PR

描述

I have a problem with loggin in to NSS that it assumes which user I want to be instead of waiting for me to type it in. For example whenever I log in with inrupt.net it logs me in as timblBOT.inrupt.net not timbl.
@jaxoncreed Not sure where to report that. I guess it is a problem with the current auth code which noone is working on, presumably — though who knows it may carry through to the next version too.

Tim Berners-Lee: Yes @RubenVerborgh it looks like a cookie problem that it sees the cookie and just grabs it. But if I explicitly log out it should delete the cookie surely

Ruben Verborgh: Indeed, that is what NSS should do.

Tim Berners-Lee @timbl 13:06
Suppose I try delete cookies > log out > … weird the log out button doesn’t do anything.
well not surprising it should break solidos as I didn’t tell it I logged out by myself.
But I can reload the page which then takes me to a logged out state, then I can go log in > select inrupt -> then I have a choice of user. So the problem seems to be that NSS doesn’t delete all Local Storage and Cookies on logout?

I’ll file it as an NSS bug then.

I suggest it is good to delete ALL local storage and ALL cookies for the domain partly form privacy and partly to help move on to the next version of the auth protocol which may format these things differently.

贡献指南

打开贡献指南

从这里开始

  1. 先读完整个 Issue,再读项目的贡献指南。
  2. 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
  3. Fork 仓库,在一个分支上完成修改。
  4. 提交 Pull Request,并在描述里引用这个 Issue 编号。

调研方向

该 issue 只提到了身份验证代码和注销按钮,没有指出具体的文件或测试。首先跟踪注销流程,并检查 Cookie 和本地存储的处理方式;当注销能够清除相关状态,使下一次登录可以选择其他用户时,即可视为完成。

由索引模型根据 Issue 内容生成。

评估

技术栈
javascript
领域
authentication
Issue 类型
缺陷
难度
4/5
预计耗时
3-5 天
活跃度
停滞
描述清晰度
需要澄清
新手友好度
35/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。