Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Duplicate Client Token Every Login #429

Open
shane-rice-bfg opened this issue Nov 19, 2016 · 7 comments
Open

Duplicate Client Token Every Login #429

shane-rice-bfg opened this issue Nov 19, 2016 · 7 comments

Comments

@shane-rice-bfg
Copy link

I am using the framework, and it seems to work flawlessly, except every time the user logs in a second time, it duplicates the authorization in at the o/authorized_tokens endpoint.

Is there any way to prevent duplicate authorizations, or automatically remove the previous authorization upon a second login?

Currently the user can log in to all applications with out a password after the first authorization and as long as their logged into this oauth server, but each login create the duplicate client application, which is unsightly and hard to mange authorizations for the clients.

@jleclanche
Copy link
Member

I have noticed this as well. I'd love a PR for it if you can, otherwise I'll take a crack at it.

@jleclanche jleclanche added this to the 1.0 milestone Feb 7, 2017
@jleclanche
Copy link
Member

@shane-rice-bfg have you had a chance to look into this?

@shane-rice-bfg
Copy link
Author

No, I have not. We have moved away from OAuth for this application.

@jleclanche jleclanche modified the milestones: 1.0, 1.1 Jun 7, 2017
@auvipy
Copy link
Contributor

auvipy commented Oct 26, 2021

was this fixed? what is the solution to contribute?

@bull500
Copy link
Contributor

bull500 commented May 31, 2023

Hello @jleclanche

Id like to give this a go
Any pointers/suggestions on how to approach this issue?

@n2ygk
Copy link
Member

n2ygk commented May 31, 2023

Hello @jleclanche

Id like to give this a go Any pointers/suggestions on how to approach this issue?

@bull500 This is a really old bug report, so please make sure it still actually exists and feel free to submit a PR!

@bull500
Copy link
Contributor

bull500 commented Jun 3, 2023

@bull500 This is a really old bug report, so please make sure it still actually exists and feel free to submit a PR!

hello @n2ygk

I did the Auth Code flow twice to test this.
The access tokens are different for me
image

On the http://127.0.0.1:8000/o/authorized_tokens/ page i do see the same app twice with individual token revoke links
Screenshot from 2023-06-03 05-45-22

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

5 participants