Skip to content

Auth flow: add logout / switch-account option on Authorize Access page #384

Description

@melvincarvalho

Problem

When a user is signed in to JSS and is presented with the Authorize Access page (the OIDC consent screen), there is no UI element to log out or switch to a different account.

The user is shown:

  • Currently signed-in WebID (e.g., `michael@jss`)
  • The requesting app's permission scopes (openid, offline_access, webid)
  • "Allow Access" / "Deny" buttons

But there is no:

  • "Log out" link
  • "Sign in as a different user" option
  • Way to switch identity without manually clearing cookies / local storage

Impact

Affects users who maintain multiple accounts (developers testing apps, multi-user pod operators, anyone managing more than one identity). Currently the only recovery is to manually clear browser state, which is friction for what should be a standard auth flow.

Suggested fix

On the Authorize Access page, surface either:

  • A small "Sign in as a different user" link near the WebID display
  • A "Log out" option that redirects to the login page

Both are standard patterns in OIDC consent screens (Google, GitHub, etc.).

Reporter

Reported by Michael Peters in the JSS pod chat (2026-05-08), with screenshot of the affected page.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions