[NIFI-8459] Logout not working properly with OIDC when using Auth0 as provider

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Information Provided
• Affects Version/s: 1.13.2
• Component/s: Core UI
• Environment: Browser: Chrome / Firefox ; Configuration of NiFi: ; - SSL certificate for the server (no client auth) ; - OIDC configuration using auth0 endpoint
• Assignee: David Handermann
• Reporter: R Arora
• Created: 22/Apr/21 14:39
• Updated: 28/Mar/23 13:42
• Resolved: 28/Mar/23 13:42

Description

Hi,

Not sure if this a bug...

I have setup a OIDC configuration with Auth0 which has worked successfully. However, when I click on logout, I'm not redirected to the auth page. Instead I'm given a message "You have have successfully logged out. You may now close the window."... But when I click the home button or refresh the page, I get logged in again without going to the auth page to ask for user creds. 

From what I'm reading in this blog: https://www.jerriepelser.com/blog/using-auth0-with-vue-oidc-client-js/ auth0 doesn't provide end_session_endpoint in it's openid-configuration and hence NiFi is confused on logout. Is there anything we can do to work around this?

Any help is appreciated. 

Thanks!

Issue Links

• is related to: NIFI-11343 Improve the flexibility and compatibility of OIDC integration