Bypassing session using OIDC plugin

Cantor, Scott cantor.2 at osu.edu
Thu Oct 20 00:00:53 UTC 2022


>    Is there an alternative way to retrieve the different user's token
> without affecting the session for the current logged in user?

No. It's not "retrieving" a token, it's issuing them. You can force it to switch the identity by throwing away the orignal one and creating a new one. But you can't just pause one, do something totally different, and then resume it.

The obvious way to do this is a private browser window, but the use of local storage often has a lot of bugs when it comes to those, so I doubt it would work all that well in some cases unless server-side storage was used.

-- Scott




More information about the users mailing list