Error when httpRequest deletes STATE_TOKEN_KEY_NAME from storage

[rthm93]

Describe the bug

The error attributes[attributeName].split is not a function was throw when I called OktaAuth.signout(). I have dug into okta-auth-js's source code and found that the error was throw from this line.

The storage.delete's implementation is found in here in browser/browserStorage.

Reproduction Steps?

The following is a min version of my AuthService in Angular:

@Injectable({
  providedIn: 'root'
})
export class AuthService {
    constructor(private oktaStateService: OktaAuthStateService, @Inject(OKTA_AUTH) private oktaAuth: OktaAuth) {}

   async logout() {
        await oktaAuth.signout();
   }
}

The following is a screenshot of my chrome debugger:

SDK Versions

System:
OS: Linux 5.15 Oracle Linux Server 8.9
CPU: (16) x64 12th Gen Intel(R) Core(TM) i7-1260P
Memory: 15.21 GB / 30.65 GB
Container: Yes
Shell: 4.4.20 - /bin/bash
Binaries:
Node: 18.19.0 - ~/.nvm/versions/node/v18.19.0/bin/node
npm: 10.2.3 - ~/.nvm/versions/node/v18.19.0/bin/npm
Browsers:
Chrome: 121.0.6167.139
npmPackages:
@okta/okta-angular: ^6.3.2 => 6.3.2
@okta/okta-auth-js: ^7.5.0 => 7.5.0

Additional Information?

No response

[rthm93]

The walkaround I am using now is to override the storageUtil in the OktaAuthOptions like the following:

new OktaAuth({
    ...
    storageUtil: {
        // Custom implementation
    }
})

[jaredperreault-okta]

Can you share your full OktaAuth config (please sanitize sensitive properties)

[rthm93]

I am using OktaAngular, the following is how I provide the OktaAuth.

export const OktaConfigProvide: Provider = {
  provide: OKTA_CONFIG,
  useFactory: (appConfigService: ConfigurationService) => ({
    oktaAuth: new OktaAuth({
      issuer: appConfigService.config.oktaIssuer,
      clientId: appConfigService.config.oktaClientId,
      redirectUri: window.location.origin + '/login-callback',
      scopes: ['openid', 'profile']
    })
  }),
  deps: [ConfigurationService]
}

my app.module.ts:

@NgModule({
    imports: [..., OktaAuthModule],
    providers: [..., OktaConfigProvide]
})
export class AppModule {}

[shuowu-okta]

@rthm93 Thanks for reporting the issue! Our team will look into it.
Internal ref: OKTA-697135