FusionAuth
    • Home
    • Categories
    • Recent
    • Popular
    • Pricing
    • Contact us
    • Docs
    • Login
    1. Home
    2. jefferson.piscos
    3. Posts
    J
    • Profile
    • Following 0
    • Followers 0
    • Topics 1
    • Posts 2
    • Best 0
    • Controversial 0
    • Groups 0

    Posts made by jefferson.piscos

    • RE: Redirect loop between login and consent page during OAuth2 authorization (Proof of Concept)

      @mark-robustelli For POC purposes, I configured it to just redirect here: http://localhost:8081/oauth/callback after successful login. However, I am redirected to the /oauth2/consent endpoint after logging in. Then after hitting POST to allow consent, I am then redirected again to the login page, hence the loop. What confuses me is why I'm redirected to the consent endpoint after logging in when in fact I did not configure anything for consent. See below for reference.

      8925ff1c-69eb-4de7-97d3-3aa6d8343213-image.png

      Also, This is what I register in my application in FusionAuth for the Authorized redirects: http://localhost:8081/oauth/callback (nothing fancy here since I'm just testing this out locally)

      I don't see this "Debug Enabled" feature in my community edition setup.

      posted in Q&A
      J
      jefferson.piscos
    • Redirect loop between login and consent page during OAuth2 authorization (Proof of Concept)

      Hello FusionAuth community,

      I am currently working on a proof of concept to integrate FusionAuth as my OAuth2/OpenID Connect provider. However, I am encountering an issue with the authorization flow:

      When I initiate the authorization request via the /oauth2/authorize endpoint, I am redirected to the login page.
      After successful login, I get redirected to the consent page.
      When I submit the consent form, I am redirected back to the login page again.
      This causes a redirect loop: Login → Consent → Login → Consent → ...
      Some important details about my setup:

      • I am still using the community edition plan (1.58.2)
      • I have not configured any consents or required scopes in the FusionAuth admin panel.
      • The only scope I request is openid.
      • I have checked the application settings and there is no explicit consent requirement set.
      • I want to understand why the system still shows the consent screen despite no consent being configured.
      • Ideally, since no consent is required, the user should be redirected directly after login without seeing the consent prompt.
      • I have tried adding prompt=none to the authorize request, but the behavior remains the same.

      Has anyone experienced this redirect loop before?
      Could this be related to session/cookie handling, missing consent records, or some configuration I might have overlooked?
      Are there recommended settings or troubleshooting steps to ensure users are not prompted for consent if none is configured?
      Any tips on how to debug or logs to inspect to identify why FusionAuth insists on consent in this scenario?

      Thank you in advance for any advice or recommendations! I’m eager to get this POC working smoothly.

      posted in Q&A
      J
      jefferson.piscos