A logged in user is required to resolve the authorization request.

[ro0NL]

Hi,

After bumping v0.8.0 to v0.9.0, we see sporadically A logged in user is required to resolve the authorization request. in prod.

Im wondering if it's a tampered/invalid call, and thus the controller should produce 4xx instead.

[krkabol]

Please see docs

oauth2-server-bundle/docs/index.md

Line 149 in 44272ff

- { path: ^/authorize, roles: IS_AUTHENTICATED_REMEMBERED }

- it is required to set it after Flex manually

similar to #191

[ro0NL]

oh wow, it was indeed missing in one of our apps 😰

thanks!