Does React SPA supports multiple login flow at one time

Jvalekar · March 2, 2023, 10:41am

Hello All,

Can anyone guide me, does react SPA support multiple login requests at the same time? I have used the react SPA to process the okta login with the Desktop client. Now React app is deployed on the AWS server and we want to sure how we can allow logon from their desktop sso to login to that react app and return the access token at the same time. Also let me know if there is any way to clear the session of a desktop client without browser?

warren · March 7, 2023, 6:36pm

If you’re talking about the Okta React library then I think you may need to beware of race conditions with multiple concurrent auth flows in the same app.

github.com

okta/okta-auth-js/blob/a57a689fedf4484d694865f7a0c04b14837f9bf3/lib/oidc/parseFromUrl.ts#L103


      
          }
          
          
const res: OAuthResponse = parseOAuthResponseFromUrl(sdk, options);
          const state = res.state;
          const oauthParams: TransactionMeta = sdk.transactionManager.load({
            state
          });
          if (!oauthParams) {
            if (sdk.options.pkce) {
              // eslint-disable-next-line max-len
              throw new AuthSdkError('Could not load PKCE codeVerifier from storage. This may indicate the auth flow has already completed or multiple auth flows are executing concurrently.', undefined);
            }
            throw new AuthSdkError('Unable to retrieve OAuth redirect params from storage');
          }
          const urls: CustomUrls = oauthParams.urls as CustomUrls;
          delete oauthParams.urls;
          
          
if (!options.url) {
            // Clean hash or search from the url
            cleanOAuthResponseFromUrl(sdk, options);
          }

If you’re able to retrieve the session id then you can use this endpoint with an Okta API token.

There is another endpoint as well that uses the user id instead but it will remove all active sessions.