Oidc-client-js: Signout and silent renew race

[rmja]

I am seeing a race for completion when signout is called when silent renew is in progress.

I have set a far too low access token expiration in identity server to trigger this behavior. When automatic silent renew is enabled (with the offline_access scope), then when invoking signoutRedirect() it can happen that the user is actually not signed out, because an ongoing silent renew is in progress.

[brockallen]

Sure, I believe you :) What are you proposing?

[rmja]

Year. I think the desired behavior is that the user is signed out, as that is triggered by interaction and should take precedence. So, any ongoing silent login should be cancelled before calling endsession.

[Guymestef]

I fixed this issue on my app by calling userManager.stopSilentRenew(); when starting the sign out flow