andrewkroh / google-oidc-auth-middleware

Google OAuth Middleware plugin for Traefik proxy
https://plugins.traefik.io/plugins/65d5360746079255c9ffd1e2/google-oidc-auth
Apache License 2.0
6 stars 1 forks source link

Set the 'login_hint' with the user's email after expiration #4

Closed andrewkroh closed 9 months ago

andrewkroh commented 9 months ago

When the cookie expires and we need to re-authenticate the user, the login_hint flag should be set to the email address to indicate which account to use.

We can set the cookie expiration to be much longer than the exp value inside the cookie value. This way the browser can remember the email beyond the life of the authorization.

https://developers.google.com/identity/openid-connect/openid-connect#login-hint