# הפסק את הודעות ה-Discord על אימות בכל כניסה

**URL:** https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494
**Category:** Feature
**Tags:** pr-welcome
**Created:** [3 במרץ,‏ 2025,‏ 5:40pm UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494 "2025-03-03T17:40:04Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![Mako-Poisoned](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mako-poisoned/32/491709_2.png) [@Mako-Poisoned](https://meta.discourse.org/u/Mako-Poisoned)
#### Post date: [3 במרץ,‏ 2025,‏ 5:40pm UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/1 "2025-03-03T17:40:04Z")

</div>

Hi there!

I’ve setup discord login on my self hosted installation. It works pretty great…except for one small thing.

 ![Screenshot 2025-03-03 at 9.26.05 AM](https://global.discourse-cdn.com/meta/original/4X/8/5/c/85c1fa1f504e2032e59a176f6a73f9ff3ac5a4cf.png)

When a user signs in with discord, they are taken to the authorization page **every time** , meaning they have to agree the authorization anytime they login. From my understanding, this should just be a one step process upon the very first time they connect discord login with discourse.

Anyway how to fix this? I followed the [documentation.](https://meta.discourse.org/t/configure-discord-login-for-discourse/127129?silent=true)

---

<div class="post-metadata">

### Author: ![Mako-Poisoned](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mako-poisoned/32/491709_2.png) [@Mako-Poisoned](https://meta.discourse.org/u/Mako-Poisoned)
#### Post date: [5 במרץ,‏ 2025,‏ 7:16pm UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/2 "2025-03-05T19:16:06Z")

</div>

האם מישהו מתמודד עם הבעיה הזאת?

---

<div class="post-metadata">

### Author: ![Canapin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/canapin/32/119591_2.png) [@Canapin](https://meta.discourse.org/u/Canapin)
#### Post date: [5 במרץ,‏ 2025,‏ 11:43pm UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/3 "2025-03-05T23:43:29Z")

</div>

כן, ניסיתי על המופע שלי ואני יכול לשכפל את הבעיה.

---

<div class="post-metadata">

### Author: ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)
#### Post date: [5 במרץ,‏ 2025,‏ 11:45pm UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/4 "2025-03-05T23:45:48Z")

</div>

Do you see the same behaviour on other sites which offer “login with Discord”? If so, it might be the expected behaviour of the Discord login system, rather than a Discourse-specific issue.

---

<div class="post-metadata">

### Author: ![Mako-Poisoned](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mako-poisoned/32/491709_2.png) [@Mako-Poisoned](https://meta.discourse.org/u/Mako-Poisoned)
#### Post date: [5 במרץ,‏ 2025,‏ 11:47pm UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/5 "2025-03-05T23:47:45Z")

</div>

זה לא ההתנהגות המיועדת. אתרים ופורומים אחרים שאני משתמש בהם בכניסה באמצעות דיסקורד מצריכים אימות חד פעמי בלבד. לאחר מכן, בכל פעם שאתה נכנס עם דיסקורד אתה מחובר אוטומטית מבלי לגשת לדף האימות.

זה קשור ל-Discourse.

---

<div class="post-metadata">

### Author: ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)
#### Post date: [5 במרץ,‏ 2025,‏ 11:55pm UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/6 "2025-03-05T23:55:12Z")

</div>

האם יש דוגמה ציבורית שתוכל לשתף כדי שנוכל לנסות את זה ולהשוות את היישום?

---

<div class="post-metadata">

### Author: ![Mako-Poisoned](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mako-poisoned/32/491709_2.png) [@Mako-Poisoned](https://meta.discourse.org/u/Mako-Poisoned)
#### Post date: [5 במרץ,‏ 2025,‏ 11:58pm UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/7 "2025-03-05T23:58:18Z")

</div>

אני לא בטוח למה אתה מתכוון בדוגמה ציבורית, אני מתנצל.

עם זאת, זה לא הנורמה. זה אמור לדרוש אימות בודד בלבד של דיסקורד בפעם הראשונה בלבד.

---

<div class="post-metadata">

### Author: ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)
#### Post date: [6 במרץ,‏ 2025,‏ 12:05am UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/8 "2025-03-06T00:05:50Z")

</div>

I mean:

> [@Mako-Poisoned](#):
>
> Other sites and forums I use

Can you share a link to one of them? Then we might be able to look at how they’re implemented, and adjust discourse to match.

---

<div class="post-metadata">

### Author: ![Mako-Poisoned](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mako-poisoned/32/491709_2.png) [@Mako-Poisoned](https://meta.discourse.org/u/Mako-Poisoned)
#### Post date: [6 במרץ,‏ 2025,‏ 12:20am UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/9 "2025-03-06T00:20:24Z")

</div>

Here is a message board I frequent, but it is not discourse software.

> **[Famiboards](https://famiboards.com/)**
>
> Leave Luck To Heaven

---

<div class="post-metadata">

### Author: ![Arkshine](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/arkshine/32/298682_2.png) [@Arkshine](https://meta.discourse.org/u/Arkshine)
#### Post date: [6 במרץ,‏ 2025,‏ 12:32am UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/10 "2025-03-06T00:32:03Z")

</div>

I wonder if it’s because of the missing [`prompt`](https://discord.com/developers/docs/topics/oauth2#shared-resources-oauth2-scopes) param to _none_ in the auth URL?

> `prompt` controls how the authorization flow handles existing authorizations. If a user has previously authorized your application with the requested scopes and prompt is set to `consent` , it will request them to reapprove their authorization. If set to `none` , it will skip the authorization screen and redirect them back to your redirect URI without requesting their authorization

---

<div class="post-metadata">

### Author: ![Mako-Poisoned](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mako-poisoned/32/491709_2.png) [@Mako-Poisoned](https://meta.discourse.org/u/Mako-Poisoned)
#### Post date: [6 במרץ,‏ 2025,‏ 12:40am UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/11 "2025-03-06T00:40:19Z")

</div>

I think you may be onto something. I found this.  
[https://community.auth0.com/t/discord-connection-prompts-for-consent-every-login/135157](https://community.auth0.com/t/discord-connection-prompts-for-consent-every-login/135157)  
Perhaps this could be updated within Discourse? As far as I know, this is not something I can do in my administrative panel, or the discord dev portal.

---

<div class="post-metadata">

### Author: ![Arkshine](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/arkshine/32/298682_2.png) [@Arkshine](https://meta.discourse.org/u/Arkshine)
#### Post date: [6 במרץ,‏ 2025,‏ 12:43am UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/12 "2025-03-06T00:43:28Z")

</div>

יש הגדרת תבנית עבור Google Auth ב-Discourse, ואני חושב שיהיה הגיוני להוסיף אחת עבור Discord.

---

<div class="post-metadata">

### Author: ![Mako-Poisoned](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mako-poisoned/32/491709_2.png) [@Mako-Poisoned](https://meta.discourse.org/u/Mako-Poisoned)
#### Post date: [6 במרץ,‏ 2025,‏ 12:45am UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/13 "2025-03-06T00:45:12Z")

</div>

אני רק שמתי לב לזה גם.

האם אתה יודע היכן ממוקם קובץ ההגדרות של ההתחברות הזו בתוך Discourse? חושב להוסיף

```plaintext
"upstream_params": {
			"prompt": {
				"value": "none"
			}
		},

```

בתוך הקובץ ולבנות מחדש, כדי לבדוק אם זה פותר את הבעיה.

עריכה: במחשבה שנייה, אני לא חושב שאני יכול לאתר את הקובץ שיאפשר לי ליישם את זה. אני חושב שיש צורך בתיקון מ-Discourse כדי שזה יעבוד כפי שמתוכנן.

---

<div class="post-metadata">

### Author: ![Canapin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/canapin/32/119591_2.png) [@Canapin](https://meta.discourse.org/u/Canapin)
#### Post date: [6 במרץ,‏ 2025,‏ 1:01am UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/14 "2025-03-06T01:01:03Z")

</div>

Since I have the issue on my instance:

> **[Unicyclist.com](https://unicyclist.com)**
>
> Explore, learn, share, and meet riders from all around the world!

---

<div class="post-metadata">

### Author: ![Arkshine](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/arkshine/32/298682_2.png) [@Arkshine](https://meta.discourse.org/u/Arkshine)
#### Post date: [6 במרץ,‏ 2025,‏ 1:03am UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/15 "2025-03-06T01:03:29Z")

</div>

> [@Mako-Poisoned](#):
>
> I think a fix from Discourse is what is necessary in order to get this functioning as intended.

Yes, wait news from the team 👍

---

<div class="post-metadata">

### Author: ![Mako-Poisoned](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mako-poisoned/32/491709_2.png) [@Mako-Poisoned](https://meta.discourse.org/u/Mako-Poisoned)
#### Post date: [6 במרץ,‏ 2025,‏ 1:04am UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/16 "2025-03-06T01:04:58Z")

</div>

Cool. Do I need to do anything else (but wait for an update?)

I’m assuming there is no real ETA for a fix like this, and it likely depends on an urgency status flow. It’s just a minor inconvenience, I suppose. But it would be awesome to see fixed!

---

<div class="post-metadata">

### Author: ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)
#### Post date: [6 במרץ,‏ 2025,‏ 1:09am UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/17 "2025-03-06T01:09:10Z")

</div>

A change to add prompt=none sounds good to me. If someone can write, test and make a PR, that will help to expedite the change.

The relevant file would be [this one](https://github.com/discourse/discourse/blob/4b3044565de9ba9212d5afe164a10cf5778485d8/lib/auth/discord_authenticator.rb), but I don’t know off-hand exactly what change would be required.

---

<div class="post-metadata">

### Author: ![Mako-Poisoned](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mako-poisoned/32/491709_2.png) [@Mako-Poisoned](https://meta.discourse.org/u/Mako-Poisoned)
#### Post date: [6 במרץ,‏ 2025,‏ 1:24am UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/18 "2025-03-06T01:24:55Z")

</div>

Looking through the file, I added

`option :authorize_params, prompt: 'none'`

underneath

`option :authorize_options, %i[scope permissions]`

on my self hosted install.

It sort of works…, but not as we’d like.

It still takes you to the discord auth page, however, the user no longer has to click `authorize`. The page will reload then take you back to your discourse page.

One step forward, another step backward. 🫠

Edit: I see @Arkshine and I tested the change and got the same result.

---

<div class="post-metadata">

### Author: ![Arkshine](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/arkshine/32/298682_2.png) [@Arkshine](https://meta.discourse.org/u/Arkshine)
#### Post date: [6 במרץ,‏ 2025,‏ 1:26am UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/19 "2025-03-06T01:26:15Z")

</div>

I did a quick test ([https://discourse.arkshine.dev/](https://discourse.arkshine.dev/)):

 ![The image shows a code snippet defining a related to Discord authentication on OmniAuth and how to authorize using a strategy. (Captioned by AI)](https://global.discourse-cdn.com/meta/original/4X/1/6/8/168a570a902e3ec760daf80e7ea54f0a84024b3c.png)

It shows the auth page but redirects automatically.

---

<div class="post-metadata">

### Author: ![Mako-Poisoned](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mako-poisoned/32/491709_2.png) [@Mako-Poisoned](https://meta.discourse.org/u/Mako-Poisoned)
#### Post date: [11 במרץ,‏ 2025,‏ 8:53pm UTC](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494/20 "2025-03-11T20:53:49Z")

</div>

> [@david](#):
>
> A change to add prompt=none sounds good to me. If someone can write, test and make a PR, that will help to expedite the change.
> 
> The relevant file would be [this one](https://github.com/discourse/discourse/blob/4b3044565de9ba9212d5afe164a10cf5778485d8/lib/auth/discord_authenticator.rb), but I don’t know off-hand exactly what change would be required.

Even with the change, it still proceeds you to the discord authentication page - which it shouldn’t do (although this time you don’t need to manually press `authenticate`).

Submitting a PR with the suggested change unfortunately would not fix the issue.

[Next page](https://meta.discourse.org/t/stop-discord-prompting-for-auth-on-every-login/355494.md?page=2)
