Bug Report: "Not you?" Button Cancels Current Authentication Flow

[linkandzelda91]

authentiklog.txt

Describe the bug
When attempting to log in to an application via authentik-2025.2.4, clicking the "Not you?" button on the top right leads to an invalidation flow, which then leads to my default authentication brand flow. which naturally does not behave like the flow I want the user to use.
To Reproduce
Steps to reproduce the behavior:

video:
https://youtu.be/IxMMai_dAg8
keep note of the flow in the url bar.

or:

1. create provider and application, set default invalidation and authentication flows to something different than the brand default
2. use the defined application url to begin the auth flow
3. select "not you?" on the password or authenticator stage

Expected behavior
when a user hits "not you" I think it should go back to the start of the current flow, not cancel the entire flow via invalidation.

Screenshots
see video

Logs
attached logs.

Im on 2025.2.4 docker. I am referencing an old issue that was closed due to being out of date/stale here:
#9965

[linkandzelda91]

Joy of joys I have a workaround, but I still think this is broken in some way.

based on this page in docs:
https://docs.goauthentik.io/docs/add-secure-apps/flows-stages/flow/examples/default_flows
"When you create a new provider, you can select certain default flows that will be used with the provider and its associated application. For example, you can create a custom flow that override the defaults configured on the brand."

I rushed to my provider and set the desired correct invalidation flow, then tried to login with the application that provider was assigned to in an incognito window. no luck, still went to the other invalidation flow. later on the page it lists the order in which it searches for flows if you dont set one. so I did that, I went to brands and set the default invalidation flow at the brand level, and now it works!

but, the docs clearly state that my selection in the provider should have higher priority right?

example:
https://youtu.be/8fgh0vsOyAc
note the first attempt ignoring the default invalidation flow I have set in the provider, preferring the brand default instead.

[linkandzelda91]

...also Im not sure I understand why the "not you?" button links to "/flows/-/cancel/" to begin with, I'd think it'd want to restart the flow from the top, no?

I am not sure if I should split this into two issues or not: one for the authentication flow being invalidated when clicking "not you", and one for the provider default invalidation flow being ignored?