From 36582157470f8742d6f9cd7ae924edf1ae60eba9 Mon Sep 17 00:00:00 2001 From: Maycon Santos Date: Tue, 1 Apr 2025 10:29:29 +0200 Subject: [PATCH] [client] Force new user login on PKCE auth in CLI (#3604) With this change, browser session won't be considered for cli authentication and credentials will be requested --- client/internal/auth/pkce_flow.go | 1 + 1 file changed, 1 insertion(+) diff --git a/client/internal/auth/pkce_flow.go b/client/internal/auth/pkce_flow.go index 71ff6de41..6c2323412 100644 --- a/client/internal/auth/pkce_flow.go +++ b/client/internal/auth/pkce_flow.go @@ -99,6 +99,7 @@ func (p *PKCEAuthorizationFlow) RequestAuthInfo(ctx context.Context) (AuthFlowIn oauth2.SetAuthURLParam("code_challenge_method", "S256"), oauth2.SetAuthURLParam("code_challenge", codeChallenge), oauth2.SetAuthURLParam("audience", p.providerConfig.Audience), + oauth2.SetAuthURLParam("prompt", "login"), ) return AuthFlowInfo{