From ed8d4a3bdada07ca86b2b23834e3265e8e506fc9 Mon Sep 17 00:00:00 2001
From: Jignesh <solankijignesh4611@gmail.com>
Date: Sun, 25 Jan 2026 14:41:41 +0530
Subject: [PATCH] Fix OIDC forced re-authentication by making prompt
 configurable

---
 server/env.js      | 2 ++
 server/passport.js | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/server/env.js b/server/env.js
index c45c655b2..6cdddbad6 100644
--- a/server/env.js
+++ b/server/env.js
@@ -64,6 +64,8 @@ const spec = {
   MAIL_PASSWORD: str({ default: "" }),
   OIDC_ENABLED: bool({ default: false }),
   OIDC_ISSUER: str({ default: "" }),
+  OIDC_PROMPT: str({ default: "" }),
+
   OIDC_CLIENT_ID: str({ default: "" }),
   OIDC_CLIENT_SECRET: str({ default: "" }),
   OIDC_SCOPE: str({ default: "openid profile email" }),
diff --git a/server/passport.js b/server/passport.js
index 8011b477e..a59b71c82 100644
--- a/server/passport.js
+++ b/server/passport.js
@@ -101,7 +101,7 @@ if (env.OIDC_ENABLED) {
           client,
           params: {
             scope: env.OIDC_SCOPE,
-            prompt: "login"
+            ...(env.OIDC_PROMPT ? { prompt: env.OIDC_PROMPT } : {})
           },
           passReqToCallback: true
         },