acmutd / acmutd/portal

[Feature Request] Customize authentication flow

未關閉
#65 0 則留言 0 個 reaction 已指派 2 人 已被 @DedsecKnight 認領 在 GitHub 檢視
Data Layer New Feature UI/UX
主要語言
TypeScript
星號
2
分支
0
PR 合併指標
30 天內沒有已合併 PR

描述

# Overview
Customize the authentication flow to prevent duplicate user accounts. Specifically to prevent officers from having duplicate accounts with their acmutd.co email.

The default functionality of NextAuth is to create a new user for each unique email. Since each officer is guaranteed to have a personal email and an acmutd.co email, this poses the problem where duplicate user accounts are created if an officer doesn't connect their acmutd.co account to their personal account.

This can be mitigated by customizing the sign in page to show every provider besides google internal acmutd.co. The officer is then forced to sign in with a personal account first.

An additional edge case is if an officer tries to sign in with google with their acmutd.co account. This can be prevented by handling using a sign in callback.

# Tasks
- [x] Customize sign-in page with all providers besides acmutd.co
- [x] Add callback to prevent acmutd.co domain emails from google sign in
- [ ] Display proper sign in page error messages with hints
- [ ] Document the authentication flow with diagrams
- [ ] Submit PR to NextAuth's documentation with corrections

# Supplemental Information
* [NextAuth sign-in page errors](https://next-auth.js.org/configuration/pages#sign-in-page)
* There is an edge case where if a user signs in with a provider then logs out and signs in with a different provider with a different email, a new user is created and the two accounts are unable to be linked. This is mitigated if a user signs in with their initial account and connects any additional accounts while logged in before they try to sign in using a different provider with a different email.
* Try connecting multiple google accounts, it works!

貢獻指南

這個儲存庫沒有索引到貢獻指南

研究方向

The issue points to the app’s sign-in page and the NextAuth sign-in callback logic. First read that authentication entry point to see how providers are listed and callback decisions are made, then locate where sign-in errors are shown to users. Add/adjust logic to filter out acmutd.co providers and block acmutd.co Google logins with clear messaging, then verify with sign-in attempts using personal vs acmutd.co accounts and update the authentication docs to describe the new flow.

由索引模型根據 Issue 內容生成。

評估

技術堆疊
next.js, typescript
領域
authentication
Issue 類型
功能
難度
3/5
預估耗時
1-2 天
活躍度
停滯
描述清晰度
基本清楚
新手友好度
35/100

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。