By default, keycloak.js
uses a Session status iframe to detect if the user has logged out from the application in another browser tab/window.
Unfortunately, this feature doesn't work in some modern browsers, unless SSL/TLS is enabled.
As a workaround, we can conditionally disable the feature (using the checkLoginIframe
option) if there is no SSL/TLS by checking if the webpage protocol is HTTPS, e.g.