mahara-contributors team mailing list archive

[Mahara Bot <1084336@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://reviews.mahara.org/6700
Committed: https://git.mahara.org/mahara/mahara/commit/4aab3a18cb0b261a4a8074e34b642f18fef91012
Submitter: Robert Lyon (robertl@xxxxxxxxxxxxxxx)
Branch:    15.04_STABLE

commit 4aab3a18cb0b261a4a8074e34b642f18fef91012
Author: Aaron Wells <aaronw@xxxxxxxxxxxxxxx>
Date:   Tue Jul 5 12:19:42 2016 +1200

Bug 1084336: Implement MNet "kill child"

If you're logged in to Mahara via a remote IdP,
when you log out on the IdP it will try to invoke
this method to log you out of Mahara.

Change-Id: Ia11250b408ba594aaa179478cd67d5499cd1e2c8
behatnotneeded: Can't test Mnet in Behat yet

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1084336

Title:
  mnet: mahara doesn't implement kill_child which results in not being
  logged out when logged out from a remote IdP over mnet

Status in Mahara:
  Fix Committed
Status in Mahara 15.04 series:
  Fix Committed
Status in Mahara 15.10 series:
  Fix Committed
Status in Mahara 16.04 series:
  Fix Committed

Bug description:
  When Mahara is doing SSO via MNet, with a remote IdP, it ought to log
  you out of Mahara when you log out of the IdP. MNet allows for this
  via the "kill_child" API method, which the IdP will call for each
  connected service provider to tell it to log a user out.

  Mahara never implemented this method, so it doesn't log you out
  properly when you log out of the IdP.

  To replicate:

  1. Set up MNet between a Moodle & Mahara site, with Moodle as the identity provider (i.e. users log in to Moodle and then roam over to Mahara)
  2. Log in to Moodle
  3. Roam over to Mahara
  4. Open up Moodle in another tab.
  5. Log out of Moodle.
  6. Go back to the tab with Mahara and try to navigate around in the site.

  Expected result: You can't navigate around because you're logged out
  of Mahara

  Actual result: You are not logged out of Mahara

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1084336/+subscriptions