Skip to content

Should use login for any context, not just app context to establish identity  #42

@ricecake

Description

@ricecake

Is your feature request related to a problem? Please describe.
Right now logging in to application in context A will require a saved session cookie for context A, even though context B provides adequate information of the same identity.

Describe the solution you'd like
We should evaluate all available context session cookie when evaluating cookie auth, and issue a new cookie with weaker auth strength if we find one for a different context.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions