From 2682a234d4012c8c64c725ce552cb3f3c4613334 Mon Sep 17 00:00:00 2001
From: = <kushal.sentientgeeks@outlook.com>
Date: Wed, 17 Jun 2026 08:45:11 +0000
Subject: [PATCH] Feat: Introduce custom OIDC client to enforce authorization
 prompts

- Created `CustomOidcClient` to override default `OidcClient` behavior, ensuring authorization prompts are always displayed.
- Updated `oidc-server.php` configuration to use the custom client model.
---
 app/OAuth/CustomOidcClient.php | 19 +++++++++++++++++++
 config/oidc-server.php         |  2 +-
 2 files changed, 20 insertions(+), 1 deletion(-)
 create mode 100644 app/OAuth/CustomOidcClient.php

diff --git a/app/OAuth/CustomOidcClient.php b/app/OAuth/CustomOidcClient.php
new file mode 100644
index 0000000..31e7309
--- /dev/null
+++ b/app/OAuth/CustomOidcClient.php
@@ -0,0 +1,19 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\OAuth;
+
+use Admin9\OidcServer\Models\OidcClient;
+use Illuminate\Contracts\Auth\Authenticatable;
+
+class CustomOidcClient extends OidcClient
+{
+    /**
+     * Determine if the client should skip the authorization prompt.
+     */
+    public function skipsAuthorization(Authenticatable $user, array $scopes): bool
+    {
+        return false; // Always show the approve/deny page
+    }
+}
diff --git a/config/oidc-server.php b/config/oidc-server.php
index 686a919..3d0254f 100644
--- a/config/oidc-server.php
+++ b/config/oidc-server.php
@@ -65,7 +65,7 @@
     | authorization prompt for first-party clients.
     |
     */
-    'client_model' => Admin9\OidcServer\Models\OidcClient::class,
+    'client_model' => App\OAuth\CustomOidcClient::class,
 
     /*
     |--------------------------------------------------------------------------