Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

internal/identity: google cannot have both approval_prompt and prompt #82

Merged
merged 1 commit into from
Apr 9, 2019

Conversation

desimone
Copy link
Contributor

@desimone desimone commented Apr 9, 2019

Fixes a bug where caused by setting both prompt=consent and approval_prompt=force. Though approval_prompt seems to be legacy it is still in the oauth2 source code.

Screen Shot 2019-04-08 at 5 13 21 PM

See:

Checklist:

  • documentation updated
  • unit tests added
  • related issues referenced
  • ready for review

@codecov
Copy link

codecov bot commented Apr 9, 2019

Codecov Report

Merging #82 into master will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master      #82   +/-   ##
=======================================
  Coverage   79.21%   79.21%           
=======================================
  Files          31       31           
  Lines        1828     1828           
=======================================
  Hits         1448     1448           
  Misses        308      308           
  Partials       72       72

@desimone desimone changed the title internal/identity: fix bug by using updated prompt param only internal/identity: google cannot have both approval_prompt and prompt Apr 9, 2019
@desimone desimone merged commit 06da599 into pomerium:master Apr 9, 2019
@desimone desimone added the bug Something isn't working label Apr 9, 2019
@desimone desimone added this to the v0.0.4 milestone Apr 9, 2019
@desimone desimone deleted the bug/google-fix-prompt-param branch April 9, 2019 00:52
gopherbot pushed a commit to golang/oauth2 that referenced this pull request May 23, 2019
…nsent

It looks like in 2016 or so` approval_prompt=force` was replaced with the open id connect friendly `prompt=consent`.

See:
- https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest
- https://developers.google.com/identity/sign-in/web/reference#gapiauth2offlineaccessoptions
- googleapis/oauth2client#453
- pomerium/pomerium#82

Change-Id: Iad2d533f451a70b2941aafd11c9b7272026a2f16
GitHub-Last-Rev: d6d10ce
GitHub-Pull-Request: #379
Reviewed-on: https://go-review.googlesource.com/c/oauth2/+/171123
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
Run-TryBot: Brad Fitzpatrick <bradfitz@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant