You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
8000
Repository navigation
Add "consent_required" to OIDC error message responses
#19051
Currently, the generic message "access_denied" is returned when the error is CONSENT_DENIED. I understand the specs say this response MAY be returned but we are getting more clients onboarding that are wanting this different error message as well as existing that use the current error response just fine.
I plan on putting together a PR / ehnacement for this change to handle both scenarios with the current KC v21 functionality as the default.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
As per https://openid.net/specs/openid-connect-core-1_0.html#AuthError specifications the response when consent has been requested but hasn't recieved any response can be "consent_required".
Currently, the generic message "access_denied" is returned when the error is CONSENT_DENIED. I understand the specs say this response MAY be returned but we are getting more clients onboarding that are wanting this different error message as well as existing that use the current error response just fine.
I plan on putting together a PR / ehnacement for this change to handle both scenarios with the current KC v21 functionality as the default.
All reactions