Search code examples
oauth-2.0single-sign-ongoogle-oauthjasig

Log out of the jasig cas4.0 not logging out of google OAuth2.0 service

I am trying to implement OAuth services in jasig cas4.0. The login feature works correctly.

But when I logout of the cas session(http: //localhost:8080/cas/logout), and then again try to login using google OAuth service, it automatically logs me in without having to provide the username and passwords or permission.

Probably I am missing some configuration. Could somebody enlighten me what am I missing?

Solution

  • Disclaimer: I'm the Chairman of CAS and founder of CAS in the cloud (https://www.casinthecloud.com). I'm the creator of the pac4j library as well.

    When you call the CAS logout, it deletes the SSO session, but do not logout from OAuth providers you could use like Google or Facebook. Therefore you may still be authenticated by Google and can log in without entering any username and password, nor validating permissions.