Dialog Red Hat Authentication wants to access the Red Hat SSO account "xy@email.com" is triggered on every app start up

[rujutashinde]

Once user signs in into SSO, I always get the dialog on the app start. This behavior seems incorrect

Update to the issue:
This was not a quick fix issue as thought before and would need some rethinking and discussions. WE will push it to the next release of this extension and with that to next release downstream.
one of the proposed solutions
Full implementation would require to implement:

• Ask users if they trust the extension provider and save trusted provider names somewhere in configuration
• Support whitelist for extensions that can access to authentication sessions created by other extensions without user confirmation
• Store the list of extensions that user allowed access to access authentication sessions created by other extensions
• We have to agree on how we are going to store the info above as a plain file or lightweight db or some other way

[rujutashinde]

@dgolovin i was speaking with @cdrage regarding this issue, maybe it might be a rushed thing to add it in the current release and should push it to the following one which gives us time to plan it better.
specially because we will have a partial fix to address the downstream builds and we still would need to figure out how to address that upstream.

@cdrage please add any other info if would like
@dgolovin if you are ok with it I wil have a discussion/plan issue for next sprint and link it to this issue.

[dgolovin]

@rujutashinde I am always in favor not to rush.

Full implementation would require to implement:

1. Ask users if they trust the extension provider and save trusted provider names somewhere in configuration
2. Support whitelist for extensions that can access to authentication sessions created by other extensions without user confirmation
3. Store the list of extensions that user allowed access to access authentication sessions created by other extensions
4. We have to agree on how we are going to store the info above as a plain file or lightweight db or some other way