8000 "identity-provider-redirector" does not forward LOGIN_HINT of authentication session · Issue #36396 · keycloak/keycloak · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
"identity-provider-redirector" does not forward LOGIN_HINT of authentication session #36396
Closed
@antikalk

Description

@antikalk

Before reporting an issue

  • I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.

Area

authentication

Describe the bug

Using the identity-provider-redirector the LOGIN_HINT on the session is not forwarded to the IDP.

Having a look at the code it seems like the redirect function is always called with the loginHint being null:

protected void redirect(AuthenticationFlowContext context, String providerId) {
redirect(context, providerId, null);
}

Instead of always using null here, the value should be taken from the AuthenticationSession, maybe like this:

protected void redirect(AuthenticationFlowContext context, String providerId) {
    String loginHint = context.getAuthenticationSession().getClientNote(OIDCLoginProtocol.LOGIN_HINT_PARAM);
    redirect(context, providerId, loginHint);
}

I stumbled upon this issue when having a look at: sventorben/keycloak-home-idp-discovery#396 (reply in thread)

Version

25.0.5 (but latest should also be affected)

Regression

  • The issue is a regression

Expected behavior

If there is a LOGIN_HINT set on the LoginSession this should be forwarded.

Actual behavior

None is forwarded.

How to Reproduce?

Setup flow like mentioned here: sventorben/keycloak-home-idp-discovery#396 (reply in thread)

Anything else?

No response

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions

    0