From cd81030b627eff609ff8243ff57e30a8ab244c41 Mon Sep 17 00:00:00 2001
From: Victor Santos <victor@infisical.com>
Date: Sun, 21 Dec 2025 18:21:48 -0300
Subject: [PATCH] fix(oidc): update params to include prompt for login while
 maintaining PKCE support

---
 backend/src/ee/services/oidc/oidc-config-service.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/src/ee/services/oidc/oidc-config-service.ts b/backend/src/ee/services/oidc/oidc-config-service.ts
index cbe1bed7ec..c89ec9ae4a 100644
--- a/backend/src/ee/services/oidc/oidc-config-service.ts
+++ b/backend/src/ee/services/oidc/oidc-config-service.ts
@@ -717,7 +717,7 @@ export const oidcConfigServiceFactory = ({
         client,
         passReqToCallback: true,
         usePKCE: supportsPKCE,
-        params: supportsPKCE ? { code_challenge_method: "S256" } : undefined
+        params: { prompt: "login", ...(supportsPKCE ? { code_challenge_method: "S256" } : {}) }
       },
       // eslint-disable-next-line @typescript-eslint/no-explicit-any
       (_req: any, tokenSet: TokenSet, cb: any) => {