-
-
Notifications
You must be signed in to change notification settings - Fork 495
Closed
Description
Describe the bug
The behavior for handling prompt=none
described in the OIDC spec (https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest) is:
- If
prompt=none
, return error it user isn't authenticated - If
prompt=none + something else
then return an error.
The current implementation raises an OIDCNoPrompt
exception whenever we get prompt=none
, the code to properly handle the exists in https://github.com/oauthlib/oauthlib/blob/master/oauthlib/openid/connect/core/grant_types/base.py#L302
Expected behavior
The functions validate_silent_login
and validate_silent_authorization
must be called and the proper errors must be raised
Metadata
Metadata
Assignees
Labels
No labels