Login_hint available at Login provider at first login_challenge?

ghenry · May 19, 2020, 10:37pm

Hi all,

In other docs I’ve read, the login hint from the client app is used to pre-populate the login form, ie your email.

Is that what you can use it for? I don’t think it comes back from a login_challenge?

Thanks.

ghenry · May 19, 2020, 10:15pm

I think I mean login_hint:

github.com

ory/hydra/blob/8967b9cb59b7fcad9fb7e1f0b0269d66f8d32a9b/consent/strategy_default.go#L272


			Client:            sanitizeClientFromRequest(ar),
			RequestURL:        iu.String(),
			AuthenticatedAt:   sqlxx.NullTime(authenticatedAt),
			RequestedAt:       time.Now().UTC(),
			SessionID:         sqlxx.NullString(sessionID),
			OpenIDConnectContext: &OpenIDConnectContext{
				IDTokenHintClaims: idTokenHintClaims,
				ACRValues:         stringsx.Splitx(ar.GetRequestForm().Get("acr_values"), " "),
				UILocales:         stringsx.Splitx(ar.GetRequestForm().Get("ui_locales"), " "),
				Display:           ar.GetRequestForm().Get("display"),
				LoginHint:         ar.GetRequestForm().Get("login_hint"),
			},
		},
	); err != nil {
		return errors.WithStack(err)
	}

	if err := createCsrfSession(w, r, s.r.CookieStore(), cookieAuthenticationCSRFName, csrf, s.c.ServesHTTPS(), s.c.CookieSameSiteMode(), s.c.CookieSameSiteLegacyWorkaround()); err != nil {
		return errors.WithStack(err)
	}

ghenry · May 19, 2020, 10:27pm

I see it comes back here:

but mine is empty. My appauth client is sending a login hint:

  "oidc_context": {
    "acr_values": [
      "string"
    ],
    "display": "string",
    "id_token_hint_claims": {
      "property1": {},
      "property2": {}
    },
    "login_hint": "string",
    "ui_locales": [
      "string"
    ]
  },

ghenry · May 19, 2020, 10:39pm

I’m just not looking!!! It’s there on the first login_challenge. Leaving this up for others:

  'oidc_context' => {
                      'login_hint' => '[email protected]'
                    },