Ya know. They way it works is kinda silly. A Logout should probably
set a notBefore policy too.
On 3/12/2014 2:02 PM, Bill Burke wrote:
On 3/12/2014 12:46 PM, Stian Thorgersen wrote:
> It's really nice to see logged in users, and to be able to manage sessions
through the admin console. I've spotted a few issues though:
>
> * Logout All (realm/sessions) or Logout specific user (realm/applications/app)
doesn't seem to work - only thing I could do to actually logout a user was to set the
not before
> * Users/sessions for users logged in to admin console or account doesn't work
View the wildfly console. You *are* being logged out, but your identity
token is still active so when you get redirected to recreate the totem,
you get relogged in. The logout button in admin console can't change
the user's cookies.
Maybe instead of logout call it "Invalidate SEssion" or "Logout
Session"?
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org
>
https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com