fix: pass access requests through PreAuthenticatedSignIn

gravitational · Jan 26, 2022 · c759820 · c759820
1 parent 94fb8bd
commit c759820
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/lib/auth/auth.go b/lib/auth/auth.go
@@ -1065,9 +1065,10 @@ func (a *Server) PreAuthenticatedSignIn(user string, identity tlsca.Identity) (t
 		return nil, trace.Wrap(err)
 	}
 	sess, err := a.NewWebSession(types.NewWebSessionRequest{
-		User:   user,
-		Roles:  roles,
-		Traits: traits,
+		User:           user,
+		Roles:          roles,
+		Traits:         traits,
+		AccessRequests: identity.ActiveRequests,
 	})
 	if err != nil {
 		return nil, trace.Wrap(err)