Details
-
Task
-
Resolution: Fixed
-
L3 - Default
-
None
-
None
-
Not defined
Description
In Optimize C8SM, we currently advise users to hide the logout button with an env var. However, we should instead display the logout button like in other modes and have it invalidate the session with Identity. Operate already do this, so we should also do it for consistency: https://github.com/camunda/operate/blob/0b580791e29fac1701a678b114e1e3a02f37b257/webapp/src/main/java/io/camunda/operate/webapp/security/identity/IdentityService.java#L47
ATs:
- Optimize C8SM displays the logout button, which invalidates the token with identity when used
- Our documentation no longer tells users to hide this button
- Our helm charts no longer hide the logout button
Testing Notes:
- The logout button is visible in the UI
- When clicked, the user no longer has access to Optimize
- When the next token refresh happens, the user no longer has access to Identity or the other applications
mgm-controller-panel
This is the controller panel for Smart Panels app
Attachments
Issue Links
- is related to
-
-
- Done
-