search

wadahiro / keycloak-discord

Keycloak Identity Provider extension for Discord
121 stars 64 forks source link

Have to approve application on every login #12

Closed Getty closed 1 year ago

Getty commented 3 years ago

Probably this is just a PEBKAC, but even tho I can login/link via Discord, I still have to approve the application every single time new, asking for the scopes. I do have Store Tokens activated.

williamhatcher commented 2 years ago

Set Prompt to none in the settings.

wadahiro commented 2 years ago

Discord seemed to support none, which is one of the prompt parameters in OIDC's authentication request. As @williamhatcher commented, please set prompt to none as shown in the attached image:

image

But as a precaution, the spec expects an error to be returned if it is not authenticated. Keep in mind that the current Discord shows the login screen when not authenticated, but that may change in the future.

An error is returned if an End-User is not already authenticated or the Client does not have pre-configured consent for the requested Claims or does not fulfill other conditions for processing the request.