goauthentik / goauthentik/authentik

implicit consent behaves like explicit consent since last update

Open
#15,814 4 comments 10 reactions 0 assignees View on GitHub
bug status/reviewing
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 2h
Merged PRs (30d)
651

Description

**Describe the bug**
Even though iconsent has been configured for a provider/service, at the first login to said service, it behaves like an econsent, where it asks you to continue. This is not the expected behaviour, and has only been introduced with the last update (currently running [2025.6.4])

**To Reproduce**
Steps to reproduce the behavior:

1. Go to Service Dashboard
2. Click on Service to be redirected to
3. Get redirected
4. See the econsent page even though it should be an iconsent page

**Expected behavior**
To be redirected without being asked?

**Screenshots**

Image

Image

**Logs**
-

**Version and Deployment (please complete the following information):**

- authentik version: 2025.6.4
- Deployment: docker-compose

**Additional context**
-

Contributor guide

Open the contributing guide

Research direction

Reproduce the first-login flow from the Service Dashboard with an iconsent-configured provider on authentik 2025.6.4. Trace the redirect and consent handling to determine why it selects econsent instead of iconsent; done means the configured implicit-consent service redirects without the consent prompt while explicit-consent services retain their prompt.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
authentication, authorization
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.