Why isn't logout working in my NextJS app on Asure Static Webapps?

Question

I have a Next.js app using Auth0 for authn/authz. Locally everything works fine (login and logout). However, when I deploy my app on Azure Static Webapps, the login still works but the logout doesn't. It seems to log me out but when redirecting me to my main page, I am signed in again. Locally though, the logout works as expected.

A Github issue shows that other people are affected but, unfortunately, the only solution mentioned is for Cloudfront users.

I've added a staticwebapp.config.json with the following config, but didn't help:

{
  "routes": [
    {
      "route": "/api/auth/*",
      "headers": {
        "cache-control": "no-store, must-revalidate"
      }
    }
  ]
}

Here's a repo where the issue is present.

@rocketer If possible, share your GitHub repository without secrets? — Aslesha Kantamsetti
– Aslesha Kantamsetti, Commented Oct 9, 2024 at 4:25
@rocketer Did you find a solution? I'm encountering the same problem. — mcollier
– mcollier, Commented Apr 29 at 22:10

Aslesha Kantamsetti · Accepted Answer · 2024-10-10 13:18:00Z

1

Why isn't logout working in my NextJS app on Asure Static Webapps?

The reason this isn’t working in the Next.js app on Azure Static Web Apps is that when I click the logout button, the app session cookie is regenerated, causing the user to be logged in again.

I manually deleted the appSession cookie using the Application option in the browser tools. I selected Cookies -> App URL -> appSession -> Clear All Cookies, and then logged out.

enter image description here

The user is successfully logged out, as shown below.

enter image description here

Refer my GitHub repository for complete code.

answered Oct 10, 2024 at 13:18

Aslesha Kantamsetti

2,0762 gold badges5 silver badges12 bronze badges

Sign up to request clarification or add additional context in comments.

6 Comments

rocketer Over a year ago

I am aware of that but the auth0-nextjs documentation doesn't mention that cookies need to be manually deleted. On localhost, the cookies are deleted, only on Azure they are not.

rocketer Over a year ago

So the trick is to configure "set-cookie": "appSession=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None; Secure" on Azure, right?

rocketer Over a year ago

Even with the same staticwebapp.config.json, the call to /api/auth/logout still sets the appSession cookie...

Aslesha Kantamsetti Over a year ago

@rocketer I tried that but nothing is worked, so I manually deleted the cookie.

rocketer Over a year ago

I don't think manually deleting the cookie is the right solution.

|

Collectives™ on Stack Overflow

Why isn't logout working in my NextJS app on Asure Static Webapps?

1 Answer 1

6 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

6 Comments

Your Answer

Sign up or log in

Post as a guest

Related