Login with id_token_hint fails

Hi,

I try to make a new (second) login using id_token_hint, but I get always an error in the end. Is it not supported by hydra, or is there anything I make wrong? The first login with prompt and redirection to login-page always works. Pls help!

curl --verbose --request GET ‘http://localhost:4444/oauth2/auth?client_id=my_client&response_type=code&scope=openid&redirect_uri=https://my-service-provider&state=abcadfssadfadssadfxa&nonce=RP2GxoOygBT23R5Ma&prompt=none&id_token_hint=…’

Result:
< HTTP/1.1 302 Found
< Location: https://my-service-provider?error=login_required&error_debug=Prompt+"none"+was+requested%2C+but+no+existing+login+session+was+found&error_description=The+Authorization+Server+requires+End-User+authentication&state=abcadfssadfadssadfxa

I would recommend reading up on “prompt=none” and silent refresh. Given that you use CURL without any cookies it’s impossible for ORY Hydra to know the login session, which is why this fails.