Allow request parameters max_age and prompt in /.auth/login request
- Dominant language
- No language data
- Stars
- 346
- Forks
- 67
- PR merge metrics
- No merged PRs in 30d
Description
**Is your feature request related to a problem? Please describe.**
I have a use case were I want to force re-entering credentials at the Identity Provider side as part of the OIDC authentication flow in a Static Web App. In all other situations, I want to be able to authenticate with the IDP using an existing session. The OIDC specification support both the `prompt` and the `max_age=0` request parameters to achieve this outcome. A clear and concise description of what you want to happen. However, Static Web App doesn't forward either of the two.
**Describe the solution you'd like**
I'd like to provide one of the parameters in an authentication request (e.g. `/.auth/login/google?max_age=0&post_login_redirect_uri=uri`, and have the parameter passed on to the Identity Provider.
**Describe alternatives you've considered**
An alternative would be to build the OIDC RP functionality myself, instead of relying on SWA, which is not what I want.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.