Sphinx 2 not redirecting to the login page after user logout.

I have 2 virtual machines. One is running an older version of TMS:

The 2nd virtual machine has an updated version of TMS:

I have noticed that our projects that were working with the older version of TMS no longer redirect to the login page when the user logs out. I have verified that the code is still working on the older version.

This is a sample project that works fine in the older version, but fails with Sphinx 2. Any advice would be welcome.

SphinxLogoutTest (2).zip (2.4 MB)

1 Like

The sample project is rather big, has many options/buttons. What are the steps to reproduce the issue?

I just tried to click "Start" in the server and launch the TMS Web Core project, but the Web Core project stays in a forever loop. Is this what you see, or is it something different?

Aren't you maybe experiencing the new Single Sign-On feature where users are redirected to login page but then no login is required, they just get the access token again?

This has been explained here: Release Notes | TMS Sphinx documentation

  • New: Single Sign-On (SSO) support across client applications. When a user has already authenticated with Sphinx (valid session cookie exists), subsequent authorization requests from other client applications skip the login UI and issue an authorization code silently. This eliminates the need for users to log in multiple times when accessing different applications that share the same Sphinx authorization server.

While I wouldn’t expect a federated logout, I think a local logout is essential for security reasons if nothing else.

I understand the SSO for opening/accessing another application when you are already signed in on the same browser, but this isn’t opening / logging into another application this is logging out of the application that was used to sign in.

Given the current situation with Sphinx 2, how could a logout be done? What local data has to be removed?

It seems to have gone from a situation where you were just logged out when the JWT expired to not being able to logout.

Yes, we are implementing the logout operation in the SSO server itself. So when calling Logout it will really be logged out from the SSO, not just have the local token deleted.

1 Like

Is it possible perform a logout using Sphinx 2 at this time?

that’s great, look forward to it. Do you have estimated release date?

It should be a matter of a couple of weeks, hopefully.

1 Like

Is there any update on this release? We can’t upgrade our apps until we have this.

We are effectively working on it, but not there yet, unfortunately.

Released now in version 2.2.

1 Like