authgear / authgear/authgear-server

[Login] Login in `/login` causing re-login for refresh_token apps

Open
#2,587 1 comment 0 reactions 0 assignees View on GitHub
bug/critical
Dominant language
Go
Stars
2k
Forks
125
Avg merge
2d 17h
Merged PRs (30d)
32

Description

## Environment
- Testing browser: New Chrome browser on Macbook in Guest mode
- Testing env: production https://www.formx.ai/

## Description
On a new browser, when user clicks "Not now" on set up passkey screen, the sign up flow should be completed, but it redirects back to login page instead of the logged in home page.

Yet if user retries the same flow, it can then successfully enter the logged in home page even though "Not now" is clicked on the second attempt.

## Steps to reproduce
1. Sign up, fill in email, verification code
2. Set up a password and Next
3. On Set up a passkey screen, click "Not now"
4. See it redirect to Login screen

## Expected result
Should direct to logged in home screen after finishing sign up / login.

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the sign-up flow at /login in a new Chrome Guest-mode browser, then compare the first and second attempts after selecting “Not now” on the passkey screen. Done means the first attempt reaches the logged-in home screen without redirecting back to Login.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
authentication
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.