--- a/mod_http_oauth2/mod_http_oauth2.lua Sun Aug 27 09:49:35 2023 +0200
+++ b/mod_http_oauth2/mod_http_oauth2.lua Sat Sep 09 21:42:24 2023 +0200
@@ -864,7 +864,7 @@
-- Client wants no interaction, only confirmation of prior login and
-- consent, but this is not implemented.
return error_response(request, redirect_uri, oauth_error("interaction_required"));
- elseif not prompt:contains("select_account") then
+ elseif not prompt:contains("select_account") and not params.login_hint then
-- TODO If the login page is split into account selection followed by login
-- (e.g. password), and then the account selection could be skipped iff the
-- 'login_hint' parameter is present.