Hi all,
I consider the handling of ui_locales a bit odd.
If localization is enabled and I create a user via admin ui there is always a locale selected, defaulting to the realm default locale (lets say en).
If my client application is now providing ui_locales=fr for example in the auth request the login page appears in french. If user now logins the token contains locale en and not fr. The same happens for subsequent pages in the login flow (e.g. verify mail address), they switch to en.
Personally I would expect that if ui_locales=fr is used and user does not change it, it is nevertheless updated in the user locale and thus in the token.
How do you handle this?