Add prompt=consent when requesting offline_access

SURFnet · Nov 5, 2024 · d258422 · d258422
1 parent ff4e4f2
commit d258422
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/main/java/generiek/api/EnrollmentEndpoint.java b/src/main/java/generiek/api/EnrollmentEndpoint.java
@@ -575,6 +575,11 @@ private String buildAuthorizationURI(EnrollmentRequest enrollmentRequest) throws
         params.put("response_type", "code");
         params.put("redirect_uri", redirectUri);
         params.put("state", base64Enrollment);
+        //When working outside of Openconnext, the 'offline_access' is added for refresh tokens,
+        // and 'prompt=consent' should be added
+        if (enrollmentRequest.getScope().contains("offline_access")) {
+            params.put("prompt", "consent");
+        }
 
         UriComponentsBuilder builder = UriComponentsBuilder.fromUri(authorizationUri);
         params.forEach(builder::queryParam);