Force reauthentication by Google, not merely presentation of offline-access consent screen (#1376)
Force reauthentication by Google, not merely presentation of offline-access consent screen (#1376)

Setting state=consent during google authentication does not cause a reauthentication prompt to appear; instead, it presents an "allow offline access" consent form.  Furthermore, setting access_type=offline interferes with the provider configuration value google.AUTH_PARAMS.access_type

Setting access_type=select_account, however, will display a screen in which the user can actually select the user identity with which to log in (even if the user is not using multiple Google accounts, they are still presented with a selection).

While not as good as clearing the google auth cookie entirely, this at least is closer to the spirit of reauthentication, and more intuitive to the user.
wli/django-allauth,spool/django-allauth,lukeburden/django-allauth,pennersr/django-allauth,pztrick/django-allauth,pennersr/django-allauth,pztrick/django-allauth,joshowen/django-allauth,joshowen/django-allauth,bittner/django-allauth,AltSchool/django-allauth,AltSchool/django-allauth,spool/django-allauth,rsalmaso/django-allauth,nimbis/django-allauth,wli/django-allauth,spool/django-allauth,nimbis/django-allauth,bittner/django-allauth,joshowen/django-allauth,lukeburden/django-allauth,AltSchool/django-allauth,wli/django-allauth,rsalmaso/django-allauth,nimbis/django-allauth,rsalmaso/django-allauth,lukeburden/django-allauth,bittner/django-allauth,pztrick/django-allauth,pennersr/django-allauth