Logging out from apps does not end SSO session
If you log out from an app, it successfully goes through hydra's logout flow. However, if you attempt to log in again, you will not be prompted for your credentials and a new session is created automatically.
This has probably been the case for a long time already -- possibly from the beginning -- but is very obvious now that we have configured Nextcloud/oidc_login
to not present the Nextcloud login screen but automatically start the OIDC login. That means that if you log out from Nextcloud now, your Nextcloud session is ended, then your SSO session as well, you're redirected back to Nextcloud, which attempts to log you in again immediately, which succeeds. So this gives the sensation that logging out from Nextcloud does not work.
Looking at the dashboard backend logs, we successfully accept the hydra logout request via the hydra api. There are no errors in the browser logs either. Perhaps we fail to end the kratos session, which is then used as basis for automatically creating a new hydra session?