There should be an option to display Account Selection page during every OAuth login request #101726
Unanswered
vineeththomasalex
asked this question in
Apps, API and Webhooks
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Select Topic Area
Bug
Body
https://github.com/github/docs/blob/main/content/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps.md#1-request-a-users-github-identity
Currently, if LoginId1 and LoginId2 are logged in to the browser, any OAuth request leads to displaying the Account Selection page where there is an additional option to login to a different account (other than LoginId1 and LoginId2 that will be displayed). This allows the user to confirm the correct account.
Also, if no user is logged in to the browser, OAuth request leads to the login page which allows the user to login to the correct account.
However, if only LoginId1 is logged in to the browser, any OAuth request is treated as a request for LoginId1 always. This happens even on repeated OAuth flows. LoginId1 just repeats the authentication step for OAuth flow automatically (and just receive a different access token).
Expected behavior should be that GitHub displays the "account selection" page during every OAuth authentication (or at least provide a way to specify this option as part of the OAuth request). This way, the OAuth will not be auto-assumed to be for LoginId1(which is the only user logged in to the browser), and the user has the option to login to a different id in this selection page.
Since GitHub now supports multiple accounts [https://docs.github.com/en/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-your-personal-account/managing-multiple-accounts], there should be an option to trigger OAuth for a new user (not for a specific user by using the "login" field in step 1).
Beta Was this translation helpful? Give feedback.
All reactions