Bug Reports
Upstream

ThinkFeedback asks you to sign in again even when already signed in elsewhere

What happens

ThinkFeedback re-challenges you for credentials even when you already have a valid ThinkAuth session, unlike every other Think service. It is the only application in the estate that behaves this way.

Why it is Upstream

Quackback, the application behind ThinkFeedback, hardcodes prompt=login on every authorization request, which forces the identity provider to re-run its full authentication flow regardless of an existing session. There is no configuration option to change or disable it.

This also has a knock-on effect: it is what routes returning users into the Authentik defect tracked separately on this board.

Requested upstream as QuackbackIO/quackback#372 — make prompt configurable per identity provider, defaulting to current behaviour. This post tracks that change.

0 Comments

Sign in to comment

No comments yet. Be the first to share your thoughts!