Auto Login

[IamTaoChen]

Currently, we didn't check if the user has already logged in when opening /login. Maybe We should check?

And If we can design a login method (e.g. OIDC or SAML) as default method and when use open /login it can automatically redirect to IdP? like gitlab(fallback login form if the idp doesn't work)

[yu-i-i]

Currently, we didn't check if the user has already logged in when opening /login. Maybe We should check?

I’d prefer not to introduce behavior changes unless there’s a clear need. Every change makes it harder to keep the code compatible with the mainstream implementation.

And If we can design a login method (e.g. OIDC or SAML) as default method and when use open /login it can automatically redirect to IdP? like gitlab(fallback login form if the idp doesn't work)

That’s debatable. Personally, I’d rather make an extra click. Besides, automatic redirection can also be handled at the web server level.

[IamTaoChen]

That’s debatable. Personally, I’d rather make an extra click. Besides, automatic redirection can also be handled at the web server level.

make sense. Here is my solution:

    # Automatically redirect to oidc
    location /login {
        return 302 /oidc/login;
    }