You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the issue:
HTTP session-based OIDC processor has a limitation when the web app is deployed in more than one container.
Params such as nonce, state, and additional query params store in the session
Enabling session affinity would be one solution, but not reliable because there could be container downtime.
Session replication is another option but the deployment will be complicated.
The text was updated successfully, but these errors were encountered:
AnuradhaSK
changed the title
Improve OIDC Manager with different storage mechanism instead of HTTP session
Add a new implementation for OIDC Manager with different storage mechanism instead of HTTP session
May 19, 2021
Describe the issue:
HTTP session-based OIDC processor has a limitation when the web app is deployed in more than one container.
Params such as nonce, state, and additional query params store in the session
asgardeo-java-oidc-sdk/io.asgardeo.java.oidc.sdk/src/main/java/io/asgardeo/java/oidc/sdk/HTTPSessionBasedOIDCProcessor.java
Line 66 in ac88bea
and try to use them validate in the callback based on the session detail will be cause for issues if the callback doesn't come to the same container.
asgardeo-java-oidc-sdk/io.asgardeo.java.oidc.sdk/src/main/java/io/asgardeo/java/oidc/sdk/HTTPSessionBasedOIDCProcessor.java
Line 82 in ac88bea
Enabling session affinity would be one solution, but not reliable because there could be container downtime.
Session replication is another option but the deployment will be complicated.
The text was updated successfully, but these errors were encountered: