Customer Account API - prompt none parameter breaks auth flow

[stevengibbsonline]

What is the location of your example repository?

No response

Which package or tool is having this issue?

Other / I don't know

What version of that package or tool are you using?

N/A

What version of Remix are you using?

No response

Steps to Reproduce

Description

The Shopify customer account API authorization flow is supposed to allow a URL parameter "prompt" with the value "none" that will return a code if a session is currently active, but currently, with a freshly logged-in user, the flow redirects with the following:

• error: login_required
• error_description: End-User authentication required.

If we omit the "prompt" parameter, the flow will successfully redirect without a prompt for an active session.

We have been using the prompt parameter for silent logins successfully, but it seems to have changed in behaviour recently.

Steps to reproduce

• create a login method that appends prompt=none to the URL parameters.

loginUrl.searchParams.append('prompt', 'none');

Expected Behavior

Redirects with the documented auth flow

Actual Behavior

Redirects with the following error;

• error: login_required
• error_description: End-User authentication required.
  

[michenly]

HI @stevengibbsonline, since your question is entirely Customer Account API related where hydrogen is not involved, I will redirect the question for you.

[michenly]

@romainshopify will be able to help triage and progress on this issue