@Override
    protected List<UserProfile> loadProfiles(final CallContext callContext, final ProfileManager manager, final List<Client> clients) {
        val prompts = oauthRequestParameterResolver.resolveSupportedPromptValues(callContext.webContext());
        LOGGER.debug("Located OpenID Connect prompts from request as [{}]", prompts);

        val tooOld = OidcRequestSupport.getOidcMaxAgeFromAuthorizationRequest(callContext.webContext())
            .map(maxAge -> manager.getProfile(BasicUserProfile.class)
                .stream()
                .anyMatch(profile -> OidcRequestSupport.isCasAuthenticationOldForMaxAgeAuthorizationRequest(callContext.webContext(), profile)))
            .orElse(Boolean.FALSE);

        return tooOld || prompts.contains(OidcConstants.PROMPT_LOGIN)
            ? new ArrayList<>()
            : super.loadProfiles(callContext, manager, clients);
    }
This is {@link OidcAuthenticationAuthorizeSecurityLogic}.

@author Misagh Moayyed
@since 6.4.0
support/cas-server-support-oidc-core-api/src/main/java/org/apereo/cas/oidc/web/OidcAuthenticationAuthorizeSecurityLogic.java