nodeSolidServer / nodeSolidServer/node-solid-server
Get automatically re-logged-in without
還沒有人認領這個 Issue。
- 主要語言
- JavaScript
- 星號
- 1.8k
- 分支
- 308
- PR 合併指標
- 30 天內沒有已合併 PR
描述
I have a problem with loggin in to NSS that it assumes which user I want to be instead of waiting for me to type it in. For example whenever I log in with inrupt.net it logs me in as timblBOT.inrupt.net not timbl.
@jaxoncreed Not sure where to report that. I guess it is a problem with the current auth code which noone is working on, presumably — though who knows it may carry through to the next version too.
Tim Berners-Lee: Yes @RubenVerborgh it looks like a cookie problem that it sees the cookie and just grabs it. But if I explicitly log out it should delete the cookie surely
Ruben Verborgh: Indeed, that is what NSS should do.
Tim Berners-Lee @timbl 13:06
Suppose I try delete cookies > log out > … weird the log out button doesn’t do anything.
well not surprising it should break solidos as I didn’t tell it I logged out by myself.
But I can reload the page which then takes me to a logged out state, then I can go log in > select inrupt -> then I have a choice of user. So the problem seems to be that NSS doesn’t delete all Local Storage and Cookies on logout?
I’ll file it as an NSS bug then.
I suggest it is good to delete ALL local storage and ALL cookies for the domain partly form privacy and partly to help move on to the next version of the auth protocol which may format these things differently.
貢獻指南
從這裡開始
- 先讀完整個 Issue,再讀專案的貢獻指南。
- 在 Issue 下留言說明你要接手 —— 這能避免兩個人做同樣的事。
- Fork 儲存庫,在一個分支上完成修改。
- 送出 Pull Request,並在描述裡引用這個 Issue 編號。
研究方向
該 issue 只提到了驗證碼與登出按鈕,沒有指出特定的檔案或測試。先追蹤登出流程,並檢查 Cookie 與本機儲存的處理方式;當登出能清除相關狀態,讓下一次登入可以選擇不同的使用者時,即可視為完成。
由索引模型根據 Issue 內容生成。
評估
- 技術堆疊
- javascript
- 領域
- authentication
- Issue 類型
- 缺陷
- 難度
- 4/5
- 預估耗時
- 3-5 天
- 活躍度
- 停滯
- 描述清晰度
- 需要釐清
- 新手友好度
- 35/100