Session attempt at refresh with prompt=none results in error page in Zitadel Login V2?
🏬Self-hosted🔗OIDC🪲Bugs❓Question✅Solved
Hi,
Been trying to work my head around this. We're using PKCE and response-type is Code. I'd love to use
Steps to reproduce:
1. log in with Zitadel. This app is a PKCE app handing out Bearer tokens.
2. in Zitadel click Logout All Users in the same browser
3. From the app, do a
4. Browser now shows a raw JSON response page in Login V2 with the contents
For the
A lot more details (this part written by Claude based on the error-message I received in my browser from ): https://gist.github.com/rud/263c30d8e056fc87d6e0b33e144e75ab
Anything I should tweak, such as finding a way to pass in
Been trying to work my head around this. We're using PKCE and response-type is Code. I'd love to use
prompt=noneprompt=none for a specific scenario where a session needs a refresh, and it seems to work great i most cases. However, if there specifically is no active session i Zitadel for a given browser, I get an unstyled error page, which I think may be a spec violation. Hopefully it is a fairly easy fix.Steps to reproduce:
1. log in with Zitadel. This app is a PKCE app handing out Bearer tokens.
2. in Zitadel click Logout All Users in the same browser
3. From the app, do a
prompt=noneprompt=none session refresh.4. Browser now shows a raw JSON response page in Login V2 with the contents
{"error":"No active session found"}{"error":"No active session found"}For the
prompt=noneprompt=none request I'm passing login_hint=user_email_herelogin_hint=user_email_here, but I don't have an id_token_hintid_token_hint value available as I'm using a PKCE interaction. Did I miss a step? A lot more details (this part written by Claude based on the error-message I received in my browser from ): https://gist.github.com/rud/263c30d8e056fc87d6e0b33e144e75ab
Anything I should tweak, such as finding a way to pass in
id_token_hintid_token_hint from somewhere? The LLM seems to suggest it's a small spec violation with a simple fix, what do you all think?
