-
Notifications
You must be signed in to change notification settings - Fork 973
Description
Feature Request
Motivation
Sometimes client apps need to open the registration page directly instead of landing user on login page
The OpenID Connect specification allows to use prompt parameters to configure how the authorization server interacts with the user. While prompt=login, prompt=none, and prompt=consent are commonly supported, an increasing number of identity providers (e.g., Auth0, Keycloak - evidence) have started to support a custom extension: prompt=create. This prompt is used to explicitly trigger a sign-up or account creation flow, rather than a typical sign-in.
Here's an OIDC specification created in December 2022 - link
Description
I propose to extend standard set of AuthorizationRequest.Prompt constant values ("none", "login", "consent", "select_account") with "create".
This will:
- standardize the set of allowed prompt
- add extensive documentation for newcomers with link to specs (as we do it for other values)
- align AppAuth with real-world OIDC implementations (Keycloak, Auth0, etc.)