Skip to content

Add support for signInWithBrowser to have acr_values/acrValues and other OIDC /authorize query parameters configurable when authenticating #455

@grantaveryatgfs

Description

@grantaveryatgfs

Describe the feature request?

The OpenID Connect (OIDC) spec outlines an optional acr_values query param that can be provided on /authorize API calls (see https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest and https://openid.net/specs/openid-connect-core-1_0.html#acrSemantics).

Okta's web APIs support this query param (see https://developer.okta.com/docs/guides/step-up-authentication/main/), as does the the Okta Auth JS library that is embedded within this library (see https://github.com/okta/okta-auth-js?tab=readme-ov-file#authorize-options).

However, if I'm running in the React Native environment and want to use this library's signInWithBrowser function, which handles the browser login and /authorize call, there does not appear to be any option to specify the desired acr_values, among several other query params.

It would be great to have this functionality supported for React Native via this library, as it will allow companies like mine to build step-up authentication across our whole product ecosystem. Thanks!

Implementation details

I see two ways this could be implemented, not sure which makes more sense:

  1. Add a section within the Okta.ConfigParameters for acr_values. This makes sense because the issuer, scopes, and other /authorize query params are set here already.
  2. Add a section within the signInWithBrowser's Okta.BrowserOptions for /authorize query params, including acr_values.

New or Affected Resource(s)

N/A

Provide a documentation link

See above

Additional Information?

N/A

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions