Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

UAuth Login Popup Flow Bypasses Domain Input Due to some Cache #144

Open
KindKang opened this issue Dec 6, 2024 · 0 comments
Open

UAuth Login Popup Flow Bypasses Domain Input Due to some Cache #144

KindKang opened this issue Dec 6, 2024 · 0 comments

Comments

@KindKang
Copy link

KindKang commented Dec 6, 2024

Experiencing an issue with the UAuth login popup flow. Here's what's happening:

  1. When calling uauth.loginWithPopup(), the popup window opens https://identity.unstoppabledomains.com/login/selectDomain.
    However, I never get the opportunity to actually input the domain name. (it is empty in the input box)
    There is no {"domain":"xx.unstoppable"} request body

  2. The selectDomain flow automatically proceeds to https://identity.unstoppabledomains.com/auth with a pre-selected domain, bypassing the domain input step.

  3. In auth page, even clicking 'Connect with a different domain', although it briefly go back to the selectDomain page, it automatically redirects again.

This appears to be a caching issue where previous login credentials are persisting. The login flow seems to be using cached domain information even after logout, and the 'Connect with a different domain' option isn't clearing these cached credentials properly.

The cached domain is in the html returned by /login/selectDomain endpoint

Current Workaround:

Manually clearing the browser cache for identity.unstoppabledomains.com resolves the issue.

Suggested Improvements:

  1. After loginout, the corresponding brower data should be removed

  2. The selectDomain endpoint should not automatically proceed without a valid {"domain":"xxx.unstoppable"} parameter

  3. The "Connect with a different domain" option should clear relevant cache/cookies to ensure a fresh domain selection

@KindKang KindKang changed the title UAuth Login Popup Flow Bypasses Domain Selection Due to some Cache UAuth Login Popup Flow Bypasses Domain Input Due to some Cache Dec 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant