QRun-IO/qqq-android
3
0 Fork 0
Code Issues Pull Requests 4 Actions Packages Projects Releases 3 Wiki Activity

fix(auth): end the identity-provider session on sign-out and force re-authentication on sign-in #27

Merged
james.maes merged 1 commits from fix/signout-idp-session into main 2026-11-09 20:10:28 +00:00
Conversation 0 Commits 1 Files Changed 7
+91 -15
1 Commits
Author SHA1 Message Date
james.maesandClaude Sonnet 5.5 b87171cafc fix(auth): end the identity-provider session on sign-out and force re-authentication on sign-in
android / android (push) Failing after 3m53s
Details
build / android (push) Failing after 3m53s
Details 
Ordinary Sign out cleared only the QQQ session; the provider session left in the
browser silently signed the same person back in (prompt=login alone was already
observed reusing retained SSO on real Authentik). Sign out now runs the provider
end-session flow when the server supports it, and every sign-in also sends
max_age=0. Stored-session restore after sign-out was checked: not a cause.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-09 14:10:00 -06:00