PI57465: OIDC: Remove session cookie after logout ENABLEMENT FIXES

Download

Abstract

The OpenID Connect Relying Party does not delete its cookies on logout

Download Description

PI57465 resolves the following problem:

ERROR DESCRIPTION:
OpenID Connect session cookie is not removed after logout. You can still see the cookie in the browser after logout.

Avoid Trouble: The interim fixes provided on this pages are enablement fixes only. They contain the WebSphere base security updates that are required for APAR PI57465 to function. The OpenID Connect functionality of PI57465 is not contained in these fixes. To obtain the OpenID Connect functionality of PI57465, see the technote Obtaining WebSphere OpenID Connect (OIDC) latest version.

USERS AFFECTED:
IBM WebSphere Application Server users of OpenID Connect

PROBLEM DESCRIPTION:
The OpenID Connect Relying Party does not delete its cookies on logout.

RECOMMENDATION:
Install a fix pack that contains this APAR

The OpenID Connect (OIDC) Relying Party (RP) session cookie, OIDCSESSIONID_(clientId), remains after logout. This cookie should be deleted upon logout.

PROBLEM CONCLUSION:
The OIDC Relying Party is updated to support logout through the HttpServletRequest.logout() Java API call. This API call will clear the LtpaToken2 and any other cookies the OIDC RP created.

Note that logout through the deprecated revokeSSOCookies() method and through the ibm_security_logout servlet is not supported for the OpenID Connect Relying Party.

THE FOLLOWING FIXES ARE PROVIDED:
8.0.0.10-WS-WAS-IFPI57465.zip applies to fixpacks 8.0.0.10 through 8.0.0.12.
8.5.5.3-WS-WASProd-IFPI57465.zip applies to fixpack 8.5.5.3.
8.5.5.4-WS-WASProd-IFPI57465.zip applies to fixpacks 8.5.5.4 through 8.5.5.5.
8.5.5.6-WS-WASProd-IFPI57465.zip applies to fixpack 8.5.5.6.
8.5.5.7-WS-WASProd-IFPI57465.zip applies to fixpacks 8.5.5.7 through 8.5.5.9.

Prerequisites

None

Installation Instructions

Please review the readme.txt for detailed installation instructions.

[{"INLabel":"V80 Readme","INLang":"US English","INSize":"3701","INURL":"ftp://public.dhe.ibm.com/software/websphere/appserv/support/fixes/PI57465/8.0.0.12/readme.txt"},{"INLabel":"V85 Readme","INLang":"US English","INSize":"3752","INURL":"ftp://public.dhe.ibm.com/software/websphere/appserv/support/fixes/PI57465/8.5.5.9/readme.txt"}]

          [{"DNLabel":"8.0.0.10-WS-WAS-IFPI57465","DNDate":"23 Jun 2016","DNLang":"US English","DNSize":"379844","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www-933.ibm.com/eserver/support/fixes/fixcentral/swgquickorder?fixes=8.0.0.10-WS-WAS-IFPI57465&productid=WebSphere Application Server&brandid=5","DNURL_FTP":" ","DDURL":null},{"DNLabel":"8.5.5.3-WS-WASProd-IFPI57465","DNDate":"06-23-2016","DNLang":"US English","DNSize":"313907","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www-933.ibm.com/eserver/support/fixes/fixcentral/swgquickorder?fixes=8.5.5.3-WS-WASProd-IFPI57465&productid=WebSphere Application Server&brandid=5","DNURL_FTP":" ","DDURL":null},{"DNLabel":"8.5.5.4-WS-WASProd-IFPI57465","DNDate":"06-23-2016","DNLang":"US English","DNSize":"315837","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www-933.ibm.com/eserver/support/fixes/fixcentral/swgquickorder?fixes=8.5.5.4-WS-WASProd-IFPI57465&productid=WebSphere Application Server&brandid=5","DNURL_FTP":" ","DDURL":null},{"DNLabel":"8.5.5.6-WS-WASProd-IFPI57465","DNDate":"06-23-2016","DNLang":"US English","DNSize":"314984","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www-933.ibm.com/eserver/support/fixes/fixcentral/swgquickorder?fixes=8.5.5.6-WS-WASProd-IFPI57465&productid=WebSphere Application Server&brandid=5","DNURL_FTP":" ","DDURL":null},{"DNLabel":"8.5.5.7-WS-WASProd-IFPI57465","DNDate":"06-23-2016","DNLang":"US English","DNSize":"317705","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www-933.ibm.com/eserver/support/fixes/fixcentral/swgquickorder?fixes=8.5.5.7-WS-WASProd-IFPI57465&productid=WebSphere Application Server&brandid=5","DNURL_FTP":" ","DDURL":null}]
          

Technical Support

Contact IBM Support using SR (http://www.ibm.com/software/support/probsub.html), visit the WebSphere Application Server support web site (http://www.ibm.com/software/webservers/appserv/was/support/), or contact 1-800-IBM-SERV (U.S. only).

[{"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"General","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF012","label":"IBM i"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"},{"code":"PF014","label":"iOS"},{"code":"PF035","label":"z\/OS"}],"Version":"8.0.0.10;8.0.0.11;8.0.0.12;8.5.5.3;8.5.5.4;8.5.5.5;8.5.5.6;8.5.5.7;8.5.5.8;8.5.5.9","Edition":"Base;Network Deployment;Single Server","Line of Business":{"code":"LOB45","label":"Automation"}}]

Problems (APARS) fixed
PI57465

Was this topic helpful?

Document Information

Modified date:
15 June 2018

UID

swg24042452

Tips