when requesting offline_access, set prompt to consent

https://openid.net/specs/openid-connect-core-1_0.html#OfflineAccess
BeryJu · Jan 1, 2024 · 55bf982 · 55bf982
1 parent 9afb7f0
commit 55bf982
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/pkg/client.go b/pkg/client.go
@@ -230,6 +230,9 @@ func (c *OIDCClient) oauthInit(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 	opts := []oauth2.AuthCodeOption{}
+	if slices.Contains(c.config.Scopes, "offline_access") {
+		opts = append(opts, oauth2.ApprovalForce)
+	}
 	if c.doRefreshChecks {
 		opts = append(opts, oauth2.AccessTypeOffline)
 	}