Description of problem: Now oauthaccesstoken name is not the token value. Management console log out cannot delete oauthaccesstoken. Refer to oc bug 1868324 Version-Release number of selected component (if applicable): 4.6.0-0.nightly-2020-08-18-191231 How reproducible: Always Steps to Reproduce: 1. Login to web console 2. Check `oc get oauthaccesstoken` 3. In web console, press F12, click "Network" tab, then log out from web console. Check `oc get oauthaccesstoken` again. Actual results: 3. Step 2 command output is still shown in step 3 command. "Network" tab shows a "POST" `delete-token` request, click its details, see: Cookie: openshift-session-token=sha256~rSXZ.... This is the token value, not the oauthaccesstoken object name. Check `oc whoami --token="sha256~rSXZ..."`, the token is still working, showing the logged in user. This means it is not logged out. Expected results: 3. The delete-token request should convert the token to oauthaccesstoken name, then delete oauthaccesstoken name like oc bug 1868324 Additional info:
Will revert https://github.com/openshift/console/pull/6319 when the logout bug is fixed.
@Jukub compare with https://github.com/openshift/oc/pull/521. The enhancement describing the change: https://github.com/openshift/enhancements/blob/master/enhancements/authentication/oauth-resource-storage.md This is a blocker for 4.6. Hence, priority urgent.
Verified in 4.6.0-0.nightly-2020-08-26-010422 with original steps.
*** Bug 1872469 has been marked as a duplicate of this bug. ***
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (OpenShift Container Platform 4.6 GA Images), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:4196