search

zquestz / omniauth-google-oauth2

Oauth2 strategy for Google
1.45k stars 413 forks source link

No option for force-reauthentication #439

Closed GeorgeHaddad0 closed 1 year ago

GeorgeHaddad0 commented 1 year ago

No option for already signed in users with google to be forced to enter their google credentials again, once they are logged in with google they automatically be logged in with sso.... I am looking for a way to force them reenter the credentials.

https://github.com/zquestz/omniauth-google-oauth2/issues/436

plesae at least confirm there is no option like that and if that something you are working on

zquestz commented 1 year ago

Yes, there is no option for this currently. I do not believe Google has hooks for this, if they do I would be happy to add it.

GeorgeHaddad0 commented 1 year ago

Thanks

HashNuke commented 1 year ago

@zquestz is right. There is no endpoint to force-reauth.

The user that logged in via Google OAuth has to be instructed to remove the app from their account via accounts.google.com -> Security -> Third-party apps.

After this, Google will then prompt the user to enter credentials when trying to login to the same app again.