-
Notifications
You must be signed in to change notification settings - Fork 4.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
UI: OIDC callback bug. #18521
UI: OIDC callback bug. #18521
Conversation
@austingebauer could you please have a look at this PR again. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you for your work on this @davidspek !
@davidspek Hi David, doing a little clean up work and noticed this PR was not yet merged. Looks like there are some conflicts. Would you mind fixing those and then we can go ahead and merge? |
Signed-off-by: David van der Spek <[email protected]>
Signed-off-by: David van der Spek <[email protected]>
Signed-off-by: David van der Spek <[email protected]>
eb9d0af
to
808ed21
Compare
@Monkeychip I've just rebased the PR. |
* don't error for other message events Signed-off-by: David van der Spek <[email protected]> * add changelog Signed-off-by: David van der Spek <[email protected]> * rename release note for changelog Signed-off-by: David van der Spek <[email protected]> --------- Signed-off-by: David van der Spek <[email protected]>
Replaces #18138 as the branch needed to be renamed following this comment. CC'in @hashishaw and @austingebauer as you were reviewing the previous PR.
When implementing vault with our OIDC provider, the popup window never closes and the OIDC callback never succeeds. This is because the main window is listening for message events from the popup window. However, in our OIDC consent page other message events originating from Intercom are sent and these break the callback handling. This is because the code implemented in #13133 will error if the first message event is not the one Vault expects. This PR effectively inverses the
if
statement so that thewhile
loop will function properly and wait for the proper event to catch.The events listed in the browser by executing
monitorEvents(window,"message")
in the browser console:The popup window for the OIDC login flow that is being referred to:
