Allow prompt option to be configurable

[cjknapp12epic]

Looks like the login() methods for Django, Flask, and Quart are all hard-coded to construct the call to Auth.log_in() with prompt="select_account".

I understand the idea of this package is to simplify working with the msal package, and I appreciate that, but it would be great if this setting were configurable (with a sensible default) in the constructors for the platform-specific classes.

[rayluo]

@cjknapp12epic, I want to better understand your situation. Can you elaborate?

• What different than "select_account" value do you plan to use after it becomes configurable?
• What are the "sensible default" you have in mind?

[cjknapp12epic]

Hi @rayluo -- In my use case, I was finding that I was being kicked back to the Entra ID "Select an account" screen every time my session needed renewing, and since the audience for my app is in a single Azure tenant and will generally always be authenticated in already, I think prompt=None will be more useful for a seamless login workflow in my case. I have already subclassed the Flask Auth class to override the login() method in my app, but wanted to see if I could avoid maintaining a local hack that might break with future updates.

select_account might still be a sensible default if it's what others prefer. I'm not sure how common my use case is.

[rayluo]

The PR #59 made prompt customizable and tentatively changed the default value to None. You may test it.

The "side effect" of prompt=None is that, when user signs out from your app, they will be brought back to your index page (by default), but then if your index is already decorated with requries_login(), then it will automatically trigger sign-in. In this case, the prompt=None will likely allow the user to automatically sign in and redirect back to your index page with a new signed-in session in your web app. Each of those steps is valid, but the end user might get an perception that their initial sign-out attempt was never successful.

[cjknapp12epic]

That makes sense. The app I'm currently working on doesn't need/support a logout workflow, so that won't be an issue for me, but I will keep that in mind if I use this again on future apps.

[rayluo]

Shipped in Identity 0.11.0