shlogg · Early preview
Justin Poehnelt @jpoehnelt

Google OIDC Limitations: No Reauthentication Prompt

OIDC spec requires reauth prompt with `&prompt=login`, but Google doesn't support it. Only `&prompt=none`, `&prompt=consent` and `&prompt=select_account` are supported.

The OpenID Connect (OIDC) specification states that when the prompt parameter is set to &prompt=login, the authorization server should prompt the user for reauthentication. If reauthentication fails, an error must be returned.
However, Google doesn't support this prompt! It only supports: &prompt=none, &prompt=consent and &prompt=select_account.

See the feature request in the issue tracker and the available OAuth parameters.