Auth Server does not issue error for prompt=none when not logged in as redirect

Haufe-Lexware / wicked.haufe.io

An API Management system based on Mashape Kong

http://wicked.haufe.io

Other

123 stars 37 forks source link

Auth Server does not issue error for prompt=none when not logged in as redirect #181

Closed DonMartin76 closed 5 years ago

DonMartin76 commented 5 years ago

If a user is not logged in, and the application requests an authorization with prompt=none, the auth server does not respond with a 302 redirect, but with a 401 JSON response.

This makes it impossible for SPAs to react on these circumstances.

DonMartin76 commented 5 years ago

Fixed in 1.0.0-rc.2.