search

wso2 / product-is

Welcome to the WSO2 Identity Server source code! For info on working with the WSO2 Identity Server repository and contributing code, click the link below.
http://wso2.github.io/
Apache License 2.0
727 stars 713 forks source link

[IS 6.1.0] Profile consent page skipped when "openid profile" scopes used during authorization #20504

Open Akila94 opened 4 weeks ago

Akila94 commented 4 weeks ago

Describe the issue:

When only openid profile scopes are used for the auth request, the profile consent page is skipped without displaying and the auth code is issued directly.

How to reproduce:

  1. Set up pickup-manager app with IS 6.1.0.
  2. Configure the manager.properties file of the sample webapp to send only openid profile scopes.
  3. Create the SP and generate clientID and client secret. Also add a claim so the consent page is displayed.
  4. Try a login attempt using the above app.
  5. You will notice that the profile page is not displayed and the code is issued.

Expected behavior: The profile page should be displayed during the consent flow when openid profile scopes are present. As verified the IS 5.10.0 shows the profile page in this scenario. But IS 6.1.0 doesn't.

Environment information (Please complete the following information; remove any unnecessary fields) :

Optional Fields

Related issues:

Suggested labels: Bug