open-humans
open-humans copied to clipboard
Improve auto OAuth2 for permission request changes
Description
Avoid "auto authorization" when requested permissions change for an OAuth2 project.
This is done by checking permissions and redirecting to reload the same endpoint with an updated approval_prompt parameter, thus prompting re-authorization by the user.
Related Issue
#1076
Testing
- passed automated testing locally
- ran locally to test manually:
- reproduced incorrect auto auth when permissions update
- confirmed corrected behavior