open-humans icon indicating copy to clipboard operation
open-humans copied to clipboard

Improve auto OAuth2 for permission request changes

Open madprime opened this issue 6 years ago • 0 comments

Description

Avoid "auto authorization" when requested permissions change for an OAuth2 project.

This is done by checking permissions and redirecting to reload the same endpoint with an updated approval_prompt parameter, thus prompting re-authorization by the user.

Related Issue

#1076

Testing

  • passed automated testing locally
  • ran locally to test manually:
    • reproduced incorrect auto auth when permissions update
    • confirmed corrected behavior

madprime avatar Nov 05 '19 18:11 madprime