Replies: 1 comment 3 replies
-
for an SPA only top-level windows would (and should) be redirected, see: https://github.com/OpenIDC/mod_auth_openidc/wiki/Sessions-and-Timeouts#single-page-applications |
Beta Was this translation helpful? Give feedback.
3 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I have a SPA that delivered the authentication to pen_auth_openidc module. My configuratoin is the following
OIDCProviderMetadataURL https://welll-known/openid-configuration
OIDCRedirectURI https://mydomain/callback
OIDCScope "openid profile"
OIDCClientID CLIENT_ID
OIDCClientSecret secret
OIDCCryptoPassphrase "tA!2bC&4dEfGhI6jKlMnOpQrStRRRRRR"
OIDCProviderTokenEndpointAuth client_secret_post
OIDCSessionType client-cookie
OIDCSessionInactivityTimeout 3600
However after 1 hour when I inspect the network tab on my inspection tool in Chrome I see
Failed to load resource: the server responded with a status of 401 (Unauthorized)
While looking at the logs from apache I see
Get the error
[Tue Feb 06 13:38:52.504250 2024] [auth_openidc:warn] [pid 393:tid 140243701331520] [client ::1:36400] oidc_session_extract: session restored from cache has expired
While reading the documentation it specifies that that "OIDCUnAuthAction" is set to auth by default but I never get redirected to my OP. Why is that ?
Beta Was this translation helpful? Give feedback.
All reactions