Skip consent flow in default Ory Network UI

[sirmax]

Preflight checklist

• I could not find a solution in the existing issues, docs, nor discussions.
• I agree to follow this project's Code of Conduct.
• I have read and am following this repository's Contribution Guidelines.
• This issue affects my Ory Network project.
• I have joined the Ory Community Slack.
• I am signed up to the Ory Security Patch Newsletter.

Describe your problem

This was originally posted in Ory Community Slack.

Currently it is not possible to skip the consent UI when using the default Ory Network authentication UI.

Describe your ideal solution

In my Ory Network project I would like to configure an OAuth2 client to skip the consent flow. This is very useful for the first-party clients, where a consent screen is an annoyance for the users and a potential source of problems, if a user does not check all the required consent boxes.

Workarounds or alternatives

The only known workaround is to implement and host a custom auth/consent UI, that would auto-accept any consent challenge. But this reduces the usefulness of Ory Network.

Version

latest

Additional Context

No response

[aeneasr]

Acknowledged, adding this to our board

[aeneasr]

One thing we have done in the past is to allow clients with the consent scope to skip the consent. However, since we now support dynamic client registration this is no longer a good idea in my opinion, as anyone can set the consent scope for an app now.

Alternatively, this could be a new flag we add to the OAuth2 Client which is possible to modify when using the admin interface. A quick and dirty fix would be to use the OAuth2 Client metadata (but adding a proper field is preferred).

The consent UI would then simply check this flag and if it is set, auto-accept the consent with full scope.

[danbim]

Hi @aeneasr ! We are looking forward to using this feature :). Doing a quick check it seems it is not available on Ory Network. How can I as a user know when such (or any other) change is rolled-out to Ory Network?

[kmherrmann]

Hi Daniel, we'll announce the feature on changelog.ory.sh as soon as it is live on Ory Network (very soon!)