Azure / Azure/static-web-apps

Allow request parameters max_age and prompt in /.auth/login request

Open
#1,647 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
346
Forks
67
PR merge metrics
No merged PRs in 30d

Description

**Is your feature request related to a problem? Please describe.**
I have a use case were I want to force re-entering credentials at the Identity Provider side as part of the OIDC authentication flow in a Static Web App. In all other situations, I want to be able to authenticate with the IDP using an existing session. The OIDC specification support both the `prompt` and the `max_age=0` request parameters to achieve this outcome. A clear and concise description of what you want to happen. However, Static Web App doesn't forward either of the two.

**Describe the solution you'd like**
I'd like to provide one of the parameters in an authentication request (e.g. `/.auth/login/google?max_age=0&post_login_redirect_uri=uri`, and have the parameter passed on to the Identity Provider.

**Describe alternatives you've considered**
An alternative would be to build the OIDC RP functionality myself, instead of relying on SWA, which is not what I want.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.