synced/coder
1
0
Fork 0
mirror of https://github.com/coder/coder.git synced 2025-07-15 21:43:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore: update IdP docs with Google quirks (#18318)

Browse Source 
Following some issues we discovered on dogfood after merging #17878, we
think `prompt=consent` is required for refresh tokens to be sent by
Google every time you sign in.
This commit is contained in:
Dean Sheather
2025-06-12 05:02:08 +10:00
committed by GitHub
parent f2f0237082
commit 8e1ccf9f80
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
docs/admin/users/idp-sync.md
View File

@ -595,3 +595,15 @@ user is granted the necessary permissions to obtain refresh tokens.
By combining the `{"access_type":"offline"}` parameter in the OIDC Auth URL with By combining the `{"access_type":"offline"}` parameter in the OIDC Auth URL with
the `offline_access` scope, you can achieve the desired behavior of obtaining the `offline_access` scope, you can achieve the desired behavior of obtaining
refresh tokens for offline access to the user's resources. refresh tokens for offline access to the user's resources.
### Google
To ensure Coder receives a refresh token when users authenticate with Google
directly, set the `prompt` to `consent` in the auth URL parameters. Without
this, users will be logged out after 1 hour.
In your Coder configuration:
```shell
CODER_OIDC_AUTH_URL_PARAMS='{"access_type": "offline", "prompt": "consent"}'
```