fix: enable skip consent on Traditional app for first-party SSO
Without this, Logto returns consent_required when the server tries SSO because the scopes were never explicitly granted. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -177,6 +177,10 @@ else
|
||||
log "Created Traditional app: $TRAD_ID"
|
||||
fi
|
||||
|
||||
# Enable skip consent for the Traditional app (first-party SSO)
|
||||
api_put "/api/applications/$TRAD_ID" '{"isThirdParty": false, "customClientMetadata": {"alwaysIssueRefreshToken": true, "skipConsent": true}}' >/dev/null 2>&1
|
||||
log "Traditional app: skip consent enabled."
|
||||
|
||||
# --- API resource ---
|
||||
EXISTING_RESOURCES=$(api_get "/api/resources")
|
||||
API_RESOURCE_ID=$(echo "$EXISTING_RESOURCES" | jq -r ".[] | select(.indicator == \"$API_RESOURCE_INDICATOR\") | .id")
|
||||
|
||||
Reference in New Issue
Block a user