Zoltán Papp 70ef1d2f25 [client] Respect DisablePromptLogin when extending the auth session ...

Forcing prompt=login on a session extend overrode DisablePromptLogin, which
is set for IdPs that break on it: Authentik triggers a double authentication
and social logins fail outright. Overriding it there trades a recoverable
extend for a login that cannot complete at all.

Keep the LoginFlag override, which only replaces max_age=0 or none with
prompt=login so the IdP honours login_hint, and leave DisablePromptLogin as
configured. Those deployments keep the silent flow, and with several accounts
signed in an extend answered from the wrong one still fails the user match.

2026-08-18 02:12:07 +02:00

..

controllers/network_map

[management] prewarm a posture check cache on network map generation (#7093)

2026-08-07 15:03:40 +02:00

modules

[management] Record reverse proxy usage for activity accounting (#7116)

2026-08-11 15:54:39 +02:00

server

[management] Record reverse proxy usage for activity accounting (#7116)

2026-08-11 15:54:39 +02:00

shared/grpc

[client] Respect DisablePromptLogin when extending the auth session

2026-08-18 02:12:07 +02:00