a82278dcbf
In the current implementation a message coming from any window on the same origin may cause the refresh token to be cleared. In my case, messages generated by a chrome extension were causing the application to logout unexpectedly. With additional condition only messages coming from the login iFrame will be processed. Another suggestion would be changing the condition `event.data != "unchanged"` to something more specific. |
||
---|---|---|
.. | ||
oidc | ||
saml | ||
spi | ||
pom.xml |