Detect if user is already logged in at other domain with the same IDP

[janverhoeckx]

Hello,

Is it possible to check if the user is already logged in at another domain with the same IDP or else stay unauthenticated? When I invoke the "initCodeFlow()" function, the user is send to the IDP login page and redirected automatically if already logged in. However, when the user is not already authenticated the IDP login page requests the user to login. In this case, I want the user to be redirected to the application.

I have tried the "loadDiscoveryDocumentAndTryLogin()" method, but then the user remains unauthenticated.

Thanks in advance.

[jeroenheijmans]

I recommend using a silent refresh mechanism. If it succeeds, the user was logged in. If it doesn't, no redirects happen, and you can be fairly certain the user should log in.

You can check my sample application which does exactly that.

[janverhoeckx]

Does this also work for the authorization code flow? The method "silentRefresh()" is documented as "Performs a silent refresh for implicit flow. Use this method to get new tokens when/before the existing tokens expire." I just tried to follow your example but it seems "silentRefresh()" isn't doing anything.

Is it possible to do a silent refresh when using the authorization code flow?

[jeroenheijmans]

I think the docs are slightly outdated, from a time when Resource Owner Password flow was the alternative (where silent refresh doesn't work). It does work for Code+PKCE flow too (my sample does so) if your server allows it.

If you're using refresh tokens instead, then you just replace silentRefresh with refreshToken and you're good to go.

(Caveat: there are some growing issues with iframe-based silent refreshes though.)

[janverhoeckx]

Thanks! With your example and this documentation I managed to get it working.