During OpenID Connect login, the Login endpoint code should lookup existing foaf:Agent instances by email, and reuse it if a match is found.
This should allow disabling TLS client auth by default (getting rid of the browser prompt) and match the apps owner's foaf:Agent instance to its UserAccount created from the Google's account metadata.
During OpenID Connect login, the
Login
endpoint code should lookup existingfoaf:Agent
instances by email, and reuse it if a match is found. This should allow disabling TLS client auth by default (getting rid of the browser prompt) and match the apps owner'sfoaf:Agent
instance to itsUserAccount
created from the Google's account metadata.