- Shipped
- October 14, 2025 at 4:04 AM UTC
- Author
- snadjafinia
- Commit
- 983e859
Auto-Login Feature: - Check for existing *** cookie on login page load - Validate session with Redis directly - If valid, create new OTK and auto-redirect to internal app - Provides seamless re-authentication without re-entering credentials New Endpoints: - /api/auto-login: Validates ***, creates OTK, returns redirect URL - /logout (page): Final logout handler, clears Redis + cookie, redirects to root Logout Flow: 1. User clicks logout on internal app 2. internal app: DELETE Redis session, CLEAR cookie, forward to login/logout 3. login app: DELETE Redis session (if exists), CLEAR cookie, redirect to root Benefits: - Users stay logged in across browser sessions (30 min TTL) - Complete SSO logout clears session from all domains - Auto-login improves UX (no repeated logins) - Direct Redis access (no SecurityService calls needed)