Files
meet/src/backend
lebaudantoine d167490c09 (backend) support silent login
Silent login attempts to re-authenticate the user without interaction,
provided they have an active session, improving UX by reducing manual auth.

It's an essential feature to really feel the SSO in La Suite.

A new query parameter, 'silent', allows the client to initiate a silent login.
In this flow, an extra parameter, 'prompt=none', is passed to the OIDC provider.

The requested flow is persisted in session data to adapt the authentication
callback behavior.

In a silent login flow, an authentication failure should not be considered as a
real failure. Instead, users should be redirected back to the originating view.
A silent login fails when user has no active session.

Why return the 'success_url'? The 'success_url' will redirect the user agent to
the 'returnTo' parameter provided when requesting authentication.
It's necessary to enable a silent login on any URL.

Minimal test coverage has been added for these two custom views to ensure
correct behavior.
2024-07-25 22:34:18 +02:00
..
2024-07-25 22:34:18 +02:00
2024-07-01 19:46:55 +02:00
2024-07-01 19:46:55 +02:00
2024-07-25 22:34:18 +02:00
2024-06-25 12:48:54 +02:00
2024-06-25 12:48:54 +02:00
2024-07-01 19:46:55 +02:00
2024-07-01 19:46:55 +02:00
2024-07-01 19:46:55 +02:00