goauthentik / goauthentik/authentik
implicit consent behaves like explicit consent since last update
- Dominant language
- Python
- Stars
- 25.6k
- Forks
- 2k
- Avg merge
- 1d 2h
- Merged PRs (30d)
- 651
Description
**Describe the bug**
Even though iconsent has been configured for a provider/service, at the first login to said service, it behaves like an econsent, where it asks you to continue. This is not the expected behaviour, and has only been introduced with the last update (currently running [2025.6.4])
**To Reproduce**
Steps to reproduce the behavior:
1. Go to Service Dashboard
2. Click on Service to be redirected to
3. Get redirected
4. See the econsent page even though it should be an iconsent page
**Expected behavior**
To be redirected without being asked?
**Screenshots**
**Logs**
-
**Version and Deployment (please complete the following information):**
- authentik version: 2025.6.4
- Deployment: docker-compose
**Additional context**
-
Contributor guide
Research direction
Reproduce the first-login flow from the Service Dashboard with an iconsent-configured provider on authentik 2025.6.4. Trace the redirect and consent handling to determine why it selects econsent instead of iconsent; done means the configured implicit-consent service redirects without the consent prompt while explicit-consent services retain their prompt.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- authentication, authorization
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100