search

HackGT / ground-truth

🛰 Single sign on for HackGT apps
https://login.hack.gt
MIT License
7 stars 2 forks source link

Users not prompted to provide scope data after application scopes change #43

Open evan10s opened 3 years ago

evan10s commented 3 years ago

If a user signs into an app that requests scopes but the scopes are not defined, and then later scopes are added to that app, that user is not prompted to provide the scope data

Example:

  1. I moved Bolt dev to Ground Truth dev, which didn't have the login scopes for Bolt defined
  2. I signed into Bolt dev, approved the access request, and then got an error from Bolt about missing user scopes
  3. I went back to Ground Truth dev and created the required login scopes
  4. Even after signing out and back into Ground Truth, then Bolt, I still got the error for the account I initially signed in with. If I signed into Bolt with a different user, I was prompted for the scope values as expected.