{"action":"created","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer4/issues/2411","repository_url":"https://api.github.com/repos/IdentityServer/IdentityServer4","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer4/issues/2411/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer4/issues/2411/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer4/issues/2411/events","html_url":"https://github.com/IdentityServer/IdentityServer4/issues/2411","id":335738632,"node_id":"MDU6SXNzdWUzMzU3Mzg2MzI=","number":2411,"title":"Issue with Single Log-out (SLO) #474","user":{"login":"tianqing88","id":8222419,"node_id":"MDQ6VXNlcjgyMjI0MTk=","avatar_url":"https://avatars3.githubusercontent.com/u/8222419?v=4","gravatar_id":"","url":"https://api.github.com/users/tianqing88","html_url":"https://github.com/tianqing88","followers_url":"https://api.github.com/users/tianqing88/followers","following_url":"https://api.github.com/users/tianqing88/following{/other_user}","gists_url":"https://api.github.com/users/tianqing88/gists{/gist_id}","starred_url":"https://api.github.com/users/tianqing88/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tianqing88/subscriptions","organizations_url":"https://api.github.com/users/tianqing88/orgs","repos_url":"https://api.github.com/users/tianqing88/repos","events_url":"https://api.github.com/users/tianqing88/events{/privacy}","received_events_url":"https://api.github.com/users/tianqing88/received_events","type":"User","site_admin":false},"labels":[{"id":290038719,"node_id":"MDU6TGFiZWwyOTAwMzg3MTk=","url":"https://api.github.com/repos/IdentityServer/IdentityServer4/labels/question","name":"question","color":"cc317c","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-06-26T09:41:48Z","updated_at":"2018-07-17T12:04:18Z","closed_at":null,"author_association":"NONE","body":"A similar issue for closed case #474 in Production Server. I have 3 .net core Apps running on oidc authentication scheme. When running on localhost it is perfectly fine. But is not working in production. Example i have two clients. Client A: abc.123.com, Client B: 123.abc.com. When A is logout, B is still remain as logged in. I guess somehow, it doesn't clear cookies from a different domain. Is there any similar issues and fixes regards to this problem?  "},"comment":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer4/issues/comments/405558397","html_url":"https://github.com/IdentityServer/IdentityServer4/issues/2411#issuecomment-405558397","issue_url":"https://api.github.com/repos/IdentityServer/IdentityServer4/issues/2411","id":405558397,"node_id":"MDEyOklzc3VlQ29tbWVudDQwNTU1ODM5Nw==","user":{"login":"regul4rj0hn","id":12700278,"node_id":"MDQ6VXNlcjEyNzAwMjc4","avatar_url":"https://avatars3.githubusercontent.com/u/12700278?v=4","gravatar_id":"","url":"https://api.github.com/users/regul4rj0hn","html_url":"https://github.com/regul4rj0hn","followers_url":"https://api.github.com/users/regul4rj0hn/followers","following_url":"https://api.github.com/users/regul4rj0hn/following{/other_user}","gists_url":"https://api.github.com/users/regul4rj0hn/gists{/gist_id}","starred_url":"https://api.github.com/users/regul4rj0hn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/regul4rj0hn/subscriptions","organizations_url":"https://api.github.com/users/regul4rj0hn/orgs","repos_url":"https://api.github.com/users/regul4rj0hn/repos","events_url":"https://api.github.com/users/regul4rj0hn/events{/privacy}","received_events_url":"https://api.github.com/users/regul4rj0hn/received_events","type":"User","site_admin":false},"created_at":"2018-07-17T12:04:18Z","updated_at":"2018-07-17T12:04:18Z","author_association":"NONE","body":"We've got a similar or maybe related issue in our Production server. I'll try to explain it clearly.\r\nFor apps A and B and Identiy Server S:\r\n1) Go to A, get redirected to S and login successfully.\r\n2) Go to B, checks the Authorize endpoint on S and gets auto-logged in via SSO.\r\n3) Logout from the client app A (correctly hitting the EndSession endpoint: SLO). Get redirected to S after successful logout,\r\n4) Client cookie still exists on B, so logout from B as well. Get redirected to S after the logout. _Am I wrong to assume here that EndSession would fail because of the ID token hint will be invalid for B on S?_\r\n5) Back on A, log back in.\r\n6) Go to B, browser still on the IS4 login page, trying to login will result into an error.\r\n\r\nHope that makes sense."}}
{"actor":{"display_login":"regul4rj0hn"}}