Skip to content

docs: Honour ?redirect= on sign-in and keep web sign-ins on the web - #716

Merged
Ziinc merged 2 commits into
mainfrom
ccr-001ba417-xtamiu-signin-redirect
Oct 9, 2026
Merged

Ziinc merged 2 commits into
mainfrom
ccr-001ba417-xtamiu-signin-redirect

Conversation

@Ziinc

@Ziinc Ziinc commented Oct 5, 2026 •

Copy link
Copy Markdown
Collaborator
  • /sign-in carries a validated ?redirect= through OAuth and email sign-in, so the GitHub App install and the alpha waitlist return users where they started
  • /auth/callback sends web sign-ins to that target (default /dashboard); it creates a desktop token and opens treq:// only for source=desktop
  • Only same-origin paths pass; the GitHub and Linear callbacks now send a relative path. Playwright covers the validator, the OAuth callback URL and replayed callbacks
    🤖 Generated with Claude Code
    https://claude.ai/code/session_01V9MDdxQJAhjXsAKyCpVwwt
    Generated by Claude Code

/sign-in now carries a validated redirect target through OAuth, email
sign-in and sign-up. /auth/callback sends web sign-ins to that target
(default /dashboard) and only creates a desktop token and opens treq://
when source=desktop. Only same-origin paths are accepted. The GitHub and
Linear callbacks now pass a relative path so the round trip validates.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01V9MDdxQJAhjXsAKyCpVwwt
@github-actions github-actions Bot changed the title Honour ?redirect= on sign-in and keep web sign-ins on the web docs: Honour ?redirect= on sign-in and keep web sign-ins on the web Oct 5, 2026
@github-actions

github-actions Bot commented Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

… URLs

The e2e lint requires specs to start at / and navigate through the UI.
The callback pages have no UI route, so their decisions move into pure
helpers (signInCallbackQuery, authCallbackDestination, signInHrefFor)
that the spec tests directly, plus one browser test from the navbar.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01V9MDdxQJAhjXsAKyCpVwwt
@Ziinc
Ziinc merged commit edc1273 into main Oct 9, 2026
22 checks passed
@Ziinc
Ziinc deleted the ccr-001ba417-xtamiu-signin-redirect branch October 9, 2026 21:42
Ziinc pushed a commit that referenced this pull request Oct 9, 2026
#716 is on main, so /auth/callback sends a web sign-in back to the
?redirect= target. The test no longer accepts a detour through /.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01V9MDdxQJAhjXsAKyCpVwwt

This branch was successfully deployed

1 active deployment
preview — 772ca5e7 Deployed Oct 5, 2026 by Ziinc via build #1708
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants