Actions
Bug #25469
open
Users from external providers manage to log in but their session is invalidated instantly
Pull Request:
Severity:
Critical - prevents main use of Rudder | no workaround | data loss | security
UX impact:
I hate Rudder for that
User visibility:
First impressions of Rudder
Effort required:
Small
Priority:
187
Name check:
To do
Fix check:
Checked
Regression:
No
Description
After installing the auth-backends plugin, I could log in using OIDC, but I directly get a log that my session is invalidated (since the parent ticket implementation) :
2024-09-13 13:16:40+0000 INFO application.authorization - Principal 'me@example.com' role list extended with OIDC provided roles: [rudder_admin(administrator)] (override: true) 2024-09-13 13:16:40+0000 INFO application - Rudder authentication attempt for principal 'me@example.com' with backend 'oidc': success 2024-09-13 13:16:40+0000 INFO application - User session for user 'me@example.com' is invalidated because : user is unknown
OIDC and LDAP users from external providers session should be treated the same as file users
Updated by 
Updated by
Actions