"login_required" error spam after successful login

[nicolas-rempulski]

Hi,

We are using cidaas-sdk 1.2.4 with a Cidaas Free package.

We observe a problem while doing the login process. The process, from authz-srv/authz to the callback to our service with the tokens is doing fine, but the SDK then spam an error for few seconds before giving up. Here is the stack of urls called :

1) Navigated to http://localhost:5000/
2) http://localhost:5000/ bundle.js:58292:14
3) Redirect logged in using cidaas sdk index.js:28:16
4) Navigated to https://mdirfr-free.cidaas.de/authz-srv/authz?client_id=7ae78297-c85f-43fa-ae71-8c9f55417c93&redirect_uri=http%3A%2F%2Flocalhost%3A5000&response_type=id_token%20token&scope=openid%20email%20profile&state=5beeee6163824bcd909632adb849f6fd&nonce=2f53c3c73e2d40f9b4c53eedf7afc183&view_type=login
5) http://localhost:5000/?groupname=etick-embedded&lang=en-US%2…ew_type=login&requestId=5e30d9a3-46eb-46d0-b575-6277be5be943 App.svelte:11:12
6) Navigated to https://mdirfr-free.cidaas.de/login-srv/login
7) http://localhost:5000/#token_type=Bearer&expires_in=86400&id….5eMXNb3Iq0c&viewtype=login&grant_type=login&view_type=login App.svelte:11:12
8) http://localhost:5000/#error=login_required&error_descriptio…c0a732484ec2a31c5487ded14b91&viewtype=login&grant_type=login App.svelte:11:12
9) http://localhost:5000/#error=login_required&error_descriptio…f5a4bbba405eb1da90cbe4216ecd&viewtype=login&grant_type=login App.svelte:11:12
10) http://localhost:5000/#error=login_required&error_descriptio…2e9e53c4436eb04c3fc343d33ad6&viewtype=login&grant_type=login App.svelte:11:12
11) http://localhost:5000/#error=login_required&error_descriptio…8ccb6f324a209a37b30fb8aadf46&viewtype=login&grant_type=login App.svelte:11:12
12) http://localhost:5000/#error=login_required&error_descriptio…b98ff31246fcbc8c1d3f6f208867&viewtype=login&grant_type=login App.svelte:11:12
13) http://localhost:5000/#error=login_required&error_descriptio…b7321e604e18be1302dc655e305b&viewtype=login&grant_type=login App.svelte:11:12
14) http://localhost:5000/#error=login_required&error_descriptio…598b12d84b97a7917c3b896e822d&viewtype=login&grant_type=login App.svelte:11:12
15) http://localhost:5000/#error=login_required&error_descriptio…6a001cf14d3ea17d287df8225021&viewtype=login&grant_type=login App.svelte:11:12

1 - 5 is the authz redirections to get the requestId and display our custom login screen properly
6 - 7 is the login process, which return correctly a token and userInfo are available after calling the SDK's loginCallback
8 - 15 is cidaas-sdk racing with our SPA router (Svelte spa router) to try to display the error message

after a while, here after 8 requests, the sdk stop pushing the error and everything is otherwise fine and stable : userInfo are accessible via the SDK. If I log userInfo during this race, the SDK return correctly the tokens and user profile.

Do you have an idea why this error is triggered and why it stops after a while ?

Thank you

EDIT : Here is a full error URL with the message :

http://localhost:5000/#error=login_required&error_description=login_required%3A%20not%20able%20to%20find%20valid%20session.&state=5fbf2e9e53c4436eb04c3fc343d33ad6&viewtype=login&grant_type=login