Hi, I am currently trying to do an Ory OAuth2.0 lo...
# ory-network
m
Hi, I am currently trying to do an Ory OAuth2.0 logout via front channel and I am facing issue to terminate the user session. I have checked the user session in ory console -> activity -> sessions. It is always active. Configurations that I have done: 1. I have registered an
frontchannel_logout_uri
as
<https://myapp.com/logout>
inside the Ory OAuth2.0 client. 2. I have also patched the
post_logout_redirect_uri
using CLI to
<https://myapp.com/>
3. I am using
oidc-client-ts
to manage the sign in and sign out of Oauth client, the payload when I use sign out redirect is sending the
id_token_hint
to
https://{project-id}.<http://projects.oryapis.com/oauth2/sessions/logout?id_token_hint={id_token}|projects.oryapis.com/oauth2/sessions/logout?id_token_hint={id_token}>
Documentation that I have read and reference: I have read these 2 links in the docs: https://www.ory.sh/docs/oauth2-oidc/oidc-logout https://www.ory.sh/docs/hydra/debug/logout After reading the 2 links, I am going to assume that the session cookie in the logout logic diagram is named
oauth2_authentication_session
. Please correct me if i am wrong. Debugging: I have doubled check my cookies in the Devtools and realised that I am not getting any session cookie named
oauth2_authentication_session
after logging in and being redirected to my application. I think this is the main cause of the problem that is causing it not to be able to terminate the user’s session. Please correct me if i am wrong. Questions: Q1: With the above information, can i know which settings am I missing from triggering the session cookie? (I am just using Ory console and Ory CLI to configure.) Q2: Or am I still also missing other settings or configuration? (i.e. my deduction/debugging is not accurate) Thank you and appreciate to get some assistance! 😀
r
Can you verify you have persistent session cookies activated in the Ory Console for this project?