consent: Do not confirmLoginSession when skip is true
Resolves a regression issue introduced by OpenID Connect Front/Back-Channel Logout.
Closes
@@ -416,9 +416,11 @@ func (s *DefaultStrategy) verifyAuthentication(w http.ResponseWriter, r *http.Re
}
}
+ if !session.LoginRequest.Skip {
if err := s.r.ConsentManager().ConfirmLoginSession(r.Context(), sessionID, session.Subject, session.Remember); err != nil {
return nil, err
}
+ }
if !session.Remember {
if !session.LoginRequest.Skip {
