multiple auth windows open at once when session expires

[wasaga]

What happened?

or, when IdP auth expires

• a client with multiple connection to remote database (single remote TCP route)
• authentication expired that results in a large amount of windows opening all at once

What did you expect to happen?

single auth for all? (enforce single flight?)

[calebdoxsey]

This is complicated. Routes can have different OIDC IdP credentials, which is why we can't assume that credentials for one TCP route can be used for another. So there's nothing to "single-flight". Each of these routes must initiate a separate login.

[calebdoxsey]

Another solution to this problem is to use a service account. With a service account we don't have to open any browser windows, so there won't be 100 opened, it will just use the same service account for all of them.

Theoretically if we had some mechanism of generating short-lived service accounts that required going through the authentication flow, we could issue the service account essentially as a local session for the device.

[Chev187]

The client should have an option to pause reconnection attempts atleast.
Ideally, there should be a configurable token lifetime to reduce the frequency of re-authentication.

Even have issues when connected to 1 route, everytime an app tries to connect ( K9s) it opens a new tab for each new retry

[rasschaert]

The constant barrage of browser tabs opening in rapid fire succession is annoying enough.

Worse is when I unlock my computer in the morning to find my system has gone completely out-of-memory from all the browser tabs that were opened overnight.

The browser tab spam happens multiple times per day, every single day. my computer going oom has happened about 3 times, each forcing me to reboot.

This is more than just a quality of life issue, this is very disruptive.