Problem/Motivation

Updated both login.gov and OpenIDConnect modules, OpenIDConnect has introduced a new default value that fails when contacting login.gov. Drupal logs the message "Authorization failed: invalid_request. Details: Prompt No valid prompt values found. Please see our documentation at https://developers.login.gov/support/#oidc-no-prompt"

Steps to reproduce

Drupal 11, update both login.gov (2.0.0) and OpenIDConnect (3.0.0-alpha7)

Login attempts fail with log message above. Per login.gov documentation, _prompt_ must be `select_account`

In src/plugin/OpenIDConnectClient, there is a function caleld getUrlOptions that uses `+=` to merge two arrays, with the second array containing the correct `prompt` value of `select_account` https://git.drupalcode.org/project/login_gov/-/blob/2.x/src/Plugin/OpenI...

However as of https://git.drupalcode.org/project/openid_connect/-/commit/09052161dea6e..., OpenIDConnect is now settings a default value, and that is not being overwritten by the array merge.

Proposed resolution

I'm not sure the best approach. I hard coded `$options['query']['prompt'] = "select_account";` Since login.gov always wants that, I don't know why we should make it an option in the configuration. OpenIDConnect does, should this mimic that?

Comments

chriszwemke created an issue. See original summary.

avpaderno’s picture

Version: 2.0.0 » 2.x-dev
timwood’s picture

Status: Active » Closed (duplicate)

Also seems like a duplicate of #3580353. Please reopen if I'm incorrect.

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.