Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make consent valid for login session in OIDC #871

Open
DMHP opened this issue Apr 2, 2018 · 0 comments
Open

Make consent valid for login session in OIDC #871

DMHP opened this issue Apr 2, 2018 · 0 comments

Comments

@DMHP
Copy link
Contributor

DMHP commented Apr 2, 2018

Description:
Currently when we provide consent as 'approve' from the dialog box it maintains the consent per request not for sessions. This limitation impacts OIDC session management as well. Because, to get session management to work, either consent should be skipped or should be approved always by the user. So we should introduce a configuration to support user consents per login sessions as well.

Steps to reproduce:

  1. Configure IS server with playground app
  2. Send an authorization request using authorization code grant type
  3. For the consent provide 'approve' from the dialogue box.
  4. In the same user session again invoke authorization EP using the same grant.
  5. It will ask for the consent again.
    We need to have a way to configure consent per user login session.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant