authgear-server icon indicating copy to clipboard operation
authgear-server copied to clipboard

Endpoint Direct Access behaviour

Open fungc-io opened this issue 8 months ago • 1 comments

If user enters the endpoint without OIDC flow, we currently show either an error page or redirect the user elsewhere after login, depending on whether custom domain is set.

image.png

This page is not helpful for the end-user as because of the jargon in the message.

Proposal

To add a configuration in Authgear, for direct access:

  1. Show a simple page with the brand logo and a button to a URL (Default)
    1. a link to home page configured by the admin, no link no button
  2. Show the Login page and Redirect to another URL after login (Selectable when custom domain is set)
    1. a link configured by the admin
    2. Current behaviour with "Post Login Link"
  3. Show the Login page and Redirect to settings page after login (Selectable when custom domain is set)
    1. Current behaviour without "Post Login Link"

Options 2,3 are greyed out with hints: “custom domain required"

The config page will be placed in "Advanced" > "Endpoint Direct Access", the page should clearly describe the config is controlling the behaviour for end-user accessing the endpoint url directly.

Default Redirect URLs in Custom Domains page

image.png

  • Post login link is replaced by the 2nd option above
  • Post logout link should also be moved to the new "Endpoint Direct access" page
  • Add a link in the "Custom Domain" page to bring the user from there to the new page

fungc-io avatar Jun 18 '24 16:06 fungc-io