Logged out Okta session page missing

[CeriZego]

If an Okta session is logged out during the session, in version v0.5.1 I saw this page which prompts for logout:

From version v1.0.0 I see some JSON instead:

{"action":"Something is wrong with your OIDC session. Please try to logout and login again","description":"The client specified not to prompt, but the user is not logged in.","error":"OIDC Error: login_required"}

Many thanks

[ralgozino]

Hi @CeriZego
thanks for reaching out and I'm sorry you are having issues with GPM. Just to better understand, is the session being closed from Okta and it is not after performing a logout from GPM, right?

[CeriZego]

Hi @ralgozino

The session is being logged out in Okta. Then when the app is used after that the error JSON is seen.
Just doing some testing after upgrading GPM. Thanks for looking at it

Ceri

[ralgozino]

thanks for the report, we'll try to reproduce it and let you know :)

[ralgozino]

I was able to reproduce the error also with Keycloak as IDP. Ending the session IDP's side is not handled gracefully by GPM.

Basically we need to do this:
zamzterz/Flask-pyoidc#71

Thanks again for the report @CeriZego