auth0/Auth0.Android

Browser cookies are not cleared on logout()

iuriirodyk opened this issue · 5 comments

Describe the problem

Hi Community!
We’re using Auth0 sdk for Android version 2.6.0 and on logout we’re not able to clear cookies. We’re using federated auth and custom tenant if it matters.
Redirect URL on logout() doesn’t do anything either, federated parameter same. Scheme is the same custom scheme as for login. All works well, but cookies are still no matter what and the user doesn’t start from the very first login page upon next login in the app.
Chrome Custom Tab cookies are not visible for the Cookie Manager, so I’m guessing only Auth0 SDK can get it done.

What was the expected behavior?

Browser cookies are cleared after WebAuthProvider.logout(auth) and upon next login there are no cookies from previous users.

Reproduction

There are just 2 methods that we use: login() and logout().

Screenshot 2022-12-07 at 8 33 49 am

Screenshot 2022-12-07 at 8 34 09 am

Environment

  • Version of this library used: 2.6.0

Hi, are these the cookies for the federated IdP?

Hi, are these the cookies for the federated IdP?

Yes, correct.
Tried federated() and tried to send parameter prompt=login, redirectTo url and that's all options pretty much

Hi @iuriirodyk, as mentioned in the article here - https://auth0.com/docs/authenticate/login/logout/log-users-out-of-idps

It depends on the IdP and some might not implement this feature. The ones that are supported are called out in the article. Any chance you can share what IdP is failing for you here?

Hi @iuriirodyk, as mentioned in the article here - https://auth0.com/docs/authenticate/login/logout/log-users-out-of-idps

It depends on the IdP and some might not implement this feature. The ones that are supported are called out in the article. Any chance you can share what IdP is failing for you here?

That's none of the listed ones. I'm more after clearing the cookies on the app/browser side rather than trying to tweak IDP. But looks like it's not possible. Will probably close it as unresolvable

Unfortunately, it looks like @iuriirodyk, you can provide product feedback here if you want and our PMs could explore more on this. I'll close this issue now.