We should skip the "give this app permission to log in" screen if the user has literally just given permission to it.

[ara4n]

Describe the bug

When a new user registers on (say) EW, or starts a login process, it feels very clunky and bad UX for MAS to then prompt them to give the app permission to access their account... given they just signalled their intent by trying to register/login in the first place.

Surely there should either be a way to pass that intent through to MAS to skip the redundant confirmation, or whitelist clients like EW entirely.

When hallway-testing Element at a conference a few weeks ago, every user I persuaded to signup immediately said "why on earth do I need to grant permission to something I just told it I wanted to do?!" - it feels like a major wart on something which is otherwise very polished.

[defaultdino]

One can offer the option to automatically whitelist a statically registered client in the config.yaml. Regarding dynamic client registration, I assume this would either have to be done automatically or not at all.