Skip to content

Should use login for any context, not just app context to establish identity  #42

Description

@ricecake

Is your feature request related to a problem? Please describe.
Right now logging in to application in context A will require a saved session cookie for context A, even though context B provides adequate information of the same identity.

Describe the solution you'd like
We should evaluate all available context session cookie when evaluating cookie auth, and issue a new cookie with weaker auth strength if we find one for a different context.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions