There's no need account password to login again after logout
Opened this issue · 2 comments
I need my account password to login for the first time to check my private data with the SolidOS Databrowser Webapp. After that, I press logout button, and then press login button again. However, this time it doesn't need account password to login. I guess something still cached.
From my understanding, this is the expected behavior in Solid, and not a bug. The logout on the client side (e.g. with this solid-client function) does not log you out from the Identity Provider (e.g. solidcommunity.com).
If you login again with the same identity provider, then it redirects to the identity provider, where you are still loggedin, and the login finishes.
I think this is a bug. The mashlib do follow the OIDC sesson end procedure. Somehow, it cannot direct user to perform log-out. The phenomenon I saw is as the following.
