ThinkFeedback asks you to sign in again even when already signed in elsewhere
What happens
ThinkFeedback re-challenges you for credentials even when you already have a valid ThinkAuth session, unlike every other Think service. It is the only application in the estate that behaves this way.
Why it is Upstream
Quackback, the application behind ThinkFeedback, hardcodes prompt=login on every authorization request, which forces the identity provider to re-run its full authentication flow regardless of an existing session. There is no configuration option to change or disable it.
This also has a knock-on effect: it is what routes returning users into the Authentik defect tracked separately on this board.
Requested upstream as QuackbackIO/quackback#372 — make prompt configurable per identity provider, defaulting to current behaviour. This post tracks that change.
0 Comments
Sign in to comment
No comments yet. Be the first to share your thoughts!
