The Authorization Server SHOULD prompt the End-User for re-authentication. If it cannot re-authenticate the End-User, it MUST return an error, typically login_required.
login_required
A scope for OpenID based authorization.