I must be doing something wrong but it appears that Casdoor is not respecting the callback if a user is already logged in.
Here's my scenario.
User goes to my app. They are NOT logged in so it redirects to my casdoor with the callback URL set.
User logs into casdoor, it redirects to the callback URL (with the code) and my app does the code -> token exchange and sets some cookies.
If the user refreshes the page, all works fine, they remain logged into the app.
If, however, the user closes the browser, and reopens my app, the cookies are gone. My app thinks they are not logged in so redirects to casdoor with the callback URL. Casdoor recognises the user IS in fact logged in (via casdoor_session_id I assume?) then redirects to the casdoor app page, rather than the callback URL I supplied.
My assuption was it should redirect to the callback again, effectively logging the user back in, but without the username/password prompt?
