Hi, I’m working on a requirement to have an ActionToken directly log in a user (sort of like “magic link”). I had a couple of thoughts that seem hack-y, and I wanted to share here in the hope I’d get some feedback. In the ActionTokenHandler, do direct naked impersonation / token exchange for the…

Logging a user in directly from an ActionToken

xgp May 3, 2022, 8:00am 8

Another extension where I used this approach: Magic Link login: Authenticator and Resource

Topic		Replies	Views
ActionTokenHandler examples Extending the server	1	606	April 28, 2021
Use cases for Action Tokens vs Authenticator's actionURL Getting advice authentication	0	1056	May 2, 2021
Custom/External Login Flow via Action Token SPI Extending the server	6	6377	April 23, 2022
Authenticating user automatically after password update Extending the server authentication	1	662	March 1, 2022
Custom required action with immediate login when done Extending the server authentication	0	721	November 13, 2020