Don't force consent screen for every Azure AD login

Signed-off-by: Arend Lagendijk <a.lagendijk@minddistrict.com>
This commit is contained in:
Arend Lagendijk 2019-08-07 10:44:44 +02:00
parent e1c00b1646
commit fe27b79b81

View file

@ -140,7 +140,7 @@ func (p *AzureProvider) Revoke(token string) error {
// GetSignInURL returns the sign in url with typical oauth parameters // GetSignInURL returns the sign in url with typical oauth parameters
func (p *AzureProvider) GetSignInURL(state string) string { func (p *AzureProvider) GetSignInURL(state string) string {
return p.oauth.AuthCodeURL(state, oauth2.AccessTypeOffline, oauth2.ApprovalForce) return p.oauth.AuthCodeURL(state, oauth2.AccessTypeOffline, oauth2.SetAuthURLParam("prompt", "select_account"))
} }
// Refresh renews a user's session using an oid refresh token without reprompting the user. // Refresh renews a user's session using an oid refresh token without reprompting the user.