multiple auth windows open at once when session expires

[wasaga]

What happened?

or, when IdP auth expires

• a client with multiple connection to remote database (single remote TCP route)
• authentication expired that results in a large amount of windows opening all at once

What did you expect to happen?

single auth for all? (enforce single flight?)

[calebdoxsey]

This is complicated. Routes can have different OIDC IdP credentials, which is why we can't assume that credentials for one TCP route can be used for another. So there's nothing to "single-flight". Each of these routes must initiate a separate login.

[calebdoxsey]

Another solution to this problem is to use a service account. With a service account we don't have to open any browser windows, so there won't be 100 opened, it will just use the same service account for all of them.

Theoretically if we had some mechanism of generating short-lived service accounts that required going through the authentication flow, we could issue the service account essentially as a local session for the device.