There was an error while loading. Please reload this page.
Rewrite the api_only entry around the symptom it produces The entry said API mode was "not properly supported" and linked the README's Known Issues section for detail. Running the suite against the dummy application with `api_only` enabled narrowed that to a single response: `prompt=consent` rendered a template, which ActionController::API cannot do, so it answered with an empty 200. That is fixed in 2.0, and the README section the entry linked to is gone with it. State the symptom the way every other entry on the page does, and note the API-mode behaviour of `prompt=consent` in the prompt table too.
Clarify return_to and the max_age / prompt evaluation order return_to is a path-relative URL (request path plus query string), not an absolute one. max_age is also evaluated before prompt handling, so a stale authentication reauthenticates first and the prompt is handled afterwards.
Add Prompt and Max Age guide