This issue has been created
There is 1 update.
 
 
OpenId Connect / cid:jira-generated-image-avatar-5de4015e-da36-4f47-acd8-6c9412165ddb OIDC-212 Open

It's still possible to override the provider from the URL even when one is configured

 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-63e1edc0-3996-4b7f-91a4-dacad26e66be Thomas Mortagne created this issue on 06/Feb/25 10:43
 
Summary: It's still possible to override the provider from the URL even when one is configured
Issue Type: cid:jira-generated-image-avatar-5de4015e-da36-4f47-acd8-6c9412165ddb Bug
Affects Versions: 2.13.5
Assignee: Unassigned
Components: Authenticator
Created: 06/Feb/25 10:43
Priority: cid:jira-generated-image-static-blocker-0f1507d0-93a4-4ea6-8506-8eb1c5c47ecb Blocker
Reporter: Thomas Mortagne
Description:

While the configuration API does not look at the request for properties like the provider, there is still code which is supposed to remember the provider indicated in the UI (when not configured) and which is actually always called, apparently.

 
 

1 update

 
cid:jira-generated-image-avatar-63e1edc0-3996-4b7f-91a4-dacad26e66be Changes by Thomas Mortagne on 06/Feb/25 10:43
 
Description: While the configuration API does not look at the request for properties like the provider, there is still code which job is supposed to remember the provider indicated in the UI (when not configured , the user gets a UI asking for the provider to use ) and which is actually always called, apparently.