From 412fe4e23fa05bf448f7fe6fcb39cd69eaaf04ad Mon Sep 17 00:00:00 2001
From: Erik Ziegler <erik.sweed@gmail.com>
Date: Fri, 11 Oct 2019 14:53:49 +0200
Subject: [PATCH] fix: Switch token storage back to localStorage because
 in-memory was annoying for end users (#1030)

---
 .../src/utils/getUserManagerForOpenIdConnectClient.js       | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/platform/viewer/src/utils/getUserManagerForOpenIdConnectClient.js b/platform/viewer/src/utils/getUserManagerForOpenIdConnectClient.js
index 38447ffa2..4ec6b91b6 100644
--- a/platform/viewer/src/utils/getUserManagerForOpenIdConnectClient.js
+++ b/platform/viewer/src/utils/getUserManagerForOpenIdConnectClient.js
@@ -1,6 +1,5 @@
 // https://github.com/maxmantz/redux-oidc/blob/master/docs/API.md
 import { loadUser, createUserManager } from 'redux-oidc';
-import { WebStorageStateStore, InMemoryWebStorage } from 'oidc-client';
 
 /**
  * Creates a userManager from oidcSettings;
@@ -21,17 +20,12 @@ export default function(store, oidcSettings) {
     return;
   }
 
-  // Do not store tokens in localStorage or sessionStorage
-  // https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/HTML5_Security_Cheat_Sheet.md#local-storage
-  const userStore = new WebStorageStateStore({ store: new InMemoryWebStorage() });
-
   const settings = {
     ...oidcSettings,
     automaticSilentRenew: true,
     revokeAccessTokenOnSignout: true,
     filterProtocolClaims: true,
     loadUserInfo: true,
-    userStore,
   };
 
   const userManager = createUserManager(settings);