Skip to content

Add support for signInWithBrowser to have acr_values/acrValues and other OIDC /authorize query parameters configurable when authenticating #455

@grantaveryatgfs

Description

@grantaveryatgfs

Describe the feature request?

The OpenID Connect (OIDC) spec outlines an optional acr_values query param that can be provided on /authorize API calls (see https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest and https://openid.net/specs/openid-connect-core-1_0.html#acrSemantics).

Okta's web APIs support this query param (see https://developer.okta.com/docs/guides/step-up-authentication/main/), as does the the Okta Auth JS library that is embedded within this library (see https://github.com/okta/okta-auth-js?tab=readme-ov-file#authorize-options).

However, if I'm running in the React Native environment and want to use this library's signInWithBrowser function, which handles the browser login and /authorize call, there does not appear to be any option to specify the desired acr_values, among several other query params.

It would be great to have this functionality supported for React Native via this library, as it will allow companies like mine to build step-up authentication across our whole product ecosystem. Thanks!

Implementation details

I see two ways this could be implemented, not sure which makes more sense:

  1. Add a section within the Okta.ConfigParameters for acr_values. This makes sense because the issuer, scopes, and other /authorize query params are set here already.
  2. Add a section within the signInWithBrowser's Okta.BrowserOptions for /authorize query params, including acr_values.

New or Affected Resource(s)

N/A

Provide a documentation link

See above

Additional Information?

N/A

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions