Skip to content

[IMPROVEMENT] Consent Screen: Flow timer expiration fails to redirect to Relying Party with error code #4345

Description

@zesu22

Current Limitation

relates to #4343

Description

The consent screen includes a flow timer to limit how long a user can spend granting consent. Currently, when the timer elapses, the application fails to handle the timeout properly. Similar to the Deny / Cancel action, timing out should automatically abort the flow and send the user back to the Relying Party (RP) / Client Portal with an appropriate error code.

Expected Behavior

When the consent screen flow timer reaches zero:

  1. The consent session should automatically terminate.
  2. The system should trigger a cancellation process (e.g., using a dedicated flow cancellation executor).
  3. The user should be redirected back to the Relying Party (RP) / Client Portal with a specific timeout/rejection error code.

Current Behavior

Upon timer expiration, the flow does not automatically redirect the user back to the Relying Party portal with the required error payload.

Steps to Reproduce

  1. Initiate an authentication flow to reach the consent screen.
  2. Wait for the consent flow timer to elapse completely without clicking any buttons.
  3. Result: The system fails to trigger the cancellation executor/redirect to the RP portal with the expected error code.

Suggested Improvement

Proposed Solution

Leverage a dedicated cancellation executor (or the same mechanism handling the Deny button) to catch the timer expiration event, terminate the flow, and execute the redirect to the client portal with the designated error payload.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Type

Projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions