duplicates in _oidcConsents when scope is updated
Concerned version
Version: 2.0.7
Summary
- Configure LLNG as OIDC provider
- Configure a RP
- Log in to the RP with scopes "openid email"
- Consent to "openid email" scope
Result in psession:
[
{
"epoch": 1587575234,
"scope": "openid email",
"rp": "rp-example"
}
]
- Login to the RP with scopes "openid email profile"
- Consent to the extended scope
Result in psession:
[
{
"epoch": 1587576168,
"rp": "rp-example",
"scope": "openid email profile"
},
{
"epoch": 1587576168,
"rp": "rp-example",
"scope": "openid email profile"
}
]
This is the root cause of consents growing out of control in #1599 (closed)