Actions
Bug #25469
open
Users from external providers manage to log in but their session is invalidated instantly
Pull Request:
Severity:
Critical - prevents main use of Rudder | no workaround | data loss | security
UX impact:
I hate Rudder for that
User visibility:
First impressions of Rudder
Effort required:
Small
Priority:
187
Name check:
To do
Fix check:
Checked
Regression:
No
Description
After installing the auth-backends plugin, I could log in using OIDC, but I directly get a log that my session is invalidated (since the parent ticket implementation) :
2024-09-13 13:16:40+0000 INFO application.authorization - Principal 'me@example.com' role list extended with OIDC provided roles: [rudder_admin(administrator)] (override: true) 2024-09-13 13:16:40+0000 INFO application - Rudder authentication attempt for principal 'me@example.com' with backend 'oidc': success 2024-09-13 13:16:40+0000 INFO application - User session for user 'me@example.com' is invalidated because : user is unknown
OIDC and LDAP users from external providers session should be treated the same as file users
Updated by Clark ANDRIANASOLO 2 months ago
- Status changed from New to In progress
Updated by Clark ANDRIANASOLO 2 months ago
- Status changed from In progress to Pending technical review
- Assignee changed from Clark ANDRIANASOLO to François ARMAND
- Pull Request set to https://github.com/Normation/rudder/pull/5878
Updated by Clark ANDRIANASOLO 2 months ago
- Status changed from Pending technical review to Pending release
Applied in changeset rudder|b18791ca24c76ee5efc3b62558881683c11f0685.
Updated by
Updated by Vincent MEMBRÉ about 2 months ago
This bug has been fixed in Rudder 8.1.7 which was released today.
Actions