There are 2 comments.
 
 
OpenId Connect / cid:jira-generated-image-avatar-90435e80-9775-44b1-8269-199876cb7524 OIDC-8 Open

Find a way for the authenticator to know if the user is already authenticated on provider
 
View issue   ยท   Add comment
 

2 comments

 
cid:jira-generated-image-avatar-9032deac-3bf6-4943-acfa-f98f7c1d4057 Cupcake Volny on 16/Jun/26 11:39
 

This sounds like a pre-authz flight with prompt=none to attempt silent authentication.

1. First we construct an authz redirect with prompt=none, redirect the user to the OP, then they redirect the user back with:
  A. a code value, all good,
  B. one of the error keys specified in the spec, then construct an authz redirect without that prompt and re-redirect the user back to the OP, etc etc
2. we can complete Auth Code Flow.

https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest
 
cid:jira-generated-image-avatar-9032deac-3bf6-4943-acfa-f98f7c1d4057 Cupcake Volny on 16/Jun/26 11:40
 
This sounds like a pre- authz flight with prompt=none to attempt silent authentication first, then fall back to standard, prompted login otherwise .

1. First we construct an authz redirect with prompt=none, redirect the user to the OP, then they redirect the user back with:
  A. a code value, all good,
  B. one of the error keys specified in the spec, then construct an authz redirect without that prompt and re-redirect the user back to the OP, etc etc
2. we can complete Auth Code Flow.

 [ https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest ]
 
 
This message was sent by Atlassian Jira (v9.3.0#930000-sha1:287aeb6) Atlassian logo
If image attachments aren't displayed, see this article.