0

I am using Identity Server 4 and Angular 2 and the angular-oauth2-oidc library. When I authenticate to Identity Server and redirect to a different page it puts the token in the address bar, if I redirect back to the same page the login was initiated from then the address bar is fine.

public redirect_uri = 'http://localhost:4200/requests';
this.oAuthService.redirectUri = this._configuration.redirect_uri;

Address Bar = http://localhost:4200/requests#id_token=eyJhbGciOiJSUzI1NiIsImtpZCI6Im...

Has anyone see anything like this before? Any idea where to begin looking at how to troubleshoot this?

Terry
  • 1,621
  • 4
  • 25
  • 45

1 Answers1

1

Yes, this is normal intended behavior. It is standard to send the token through as a hash/uri fragment.

This post can clear it up for you.

Community
  • 1
  • 1
Lutando
  • 4,909
  • 23
  • 42