Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Returning federated user prompted for password that does not exist #3728

Open
zzorba opened this issue Dec 21, 2024 · 0 comments
Open

Returning federated user prompted for password that does not exist #3728

zzorba opened this issue Dec 21, 2024 · 0 comments

Comments

@zzorba
Copy link

zzorba commented Dec 21, 2024

Describe the bug
When a user has signed onto the device previously, an attempt to sign in again is presented with a welcome back screen bearing the user's name and a password prompt. However, if the was signed in via an OIDC provider (e.g. Google/Apple), they have no password and this attempt to login will fail with a "No password" error. The form also does not offer them the choice to login with their previous OIDC provider at all.

It seems like this welcome-back behavior needs to be OIDC aware to be effective.

To Reproduce
Steps to reproduce the behavior:

  1. Sign into a client using MAS and an OIDC provider (Google).
  2. Complete login, then logout of the app.
  3. Attempt to login again, you will be presented to return and reauthorize the account with a password.
  4. See error

Expected behavior
I would expect that a returning user would be prompted to use their previous method of 3rd party authorization if they do not have a password.

Smartphone:

  • Device: iOS
  • OS: 17.5
  • Browser: Authenticated Embedded Browser
  • Version: NA
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant