Hi Ushanas,
Out of the box, client applications do not have any mechanism to determine if the user has
logged out.
But you can implement it using the so called "iframe trick". More info here:
https://www.keycloak.org/docs/latest/securing_apps/index.html#openid-conn...
Cheers,
Dmitry Telegin
CTO, Acutus s.r.o.
Keycloak Consulting and Training
Pod lipami street 339/52, 130 00 Prague 3, Czech Republic
+42 (022) 888-30-71
E-mail: info(a)acutus.pro
On Thu, 2018-07-26 at 04:06 +0530, Ushanas Shastri wrote:
Hello,
We have 4 different applications, hosted on 3 unique servers. All
applications are protected by KeyCloak. All apps are built on AngularJS.
In cases where we have multiple tabs open (one for each application) in
Chrome.
When users logout from one Tab, the other tabs don't always logout. Post
this, applications that we login to keep getting unauthorized, and I assume
that the tokens have been invalidated.
I've tried version 3.0 and 3.2.1.
I'm looking for any guidance and best practices to handle such cases.
Regards, Ushanas.
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user