[NIFI-4890] OIDC Token Refresh should be supported

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.0
• Fix Version/s: 2.0.0-M1, 1.21.0
• Component/s: Core UI

Environment

Environment:
Browser: Chrome / Firefox
Configuration of NiFi:
- SSL certificate for the server (no client auth)
- OIDC configuration including end_session_endpoint (see the link https://auth.s.orchestracities.com/auth/realms/default/.well-known/openid-configuration)

• Assignee: David Handermann
• Reporter: Federico Michele Facca
• Created: 17/Feb/18 17:30
• Updated: 11/Jul/23 17:47
• Resolved: 28/Mar/23 12:36

Description

It looks like the NIFI UI is not refreshing the OIDC token in background, and because of that, when the token expires, tells you that your session is expired. and you need to refresh the page, to get a new token.

Issue Links

• causes: NIFI-11781 Azure AD SSO with OIDC fails in NiFi 1.21.0 and 1.22.0
• causes: NIFI-11365 OIDC login does not comply with nifi.web.proxy.context.path
• causes: NIFI-11438 OIDC requests all available scopes
• fixes: NIFI-7634 Add OIDC identity mappings
• is related to: NIFI-11370 Unable to connect to OIDC service using NiFi truststore
• relates to: NIFI-11014 JWT token is rejected by NiFi when calling APIs
• links to: GitHub Pull Request #7013