- Ya
- 14 Oktoba 2025, 04:04 UTC
- Mwandishi
- snadjafinia
- Ahadi ya
- 983e859
Auto-Login Feature: - Check for existing *** cookie on login page load - Validate session with Redis directly - If valid, create new OTK and auto-redirect to internal app - Provides seamless re-authentication without re-entering credentials New Endpoints: - /api/auto-login: Validates ***, creates OTK, returns redirect URL - /logout (page): Final logout handler, clears Redis + cookie, redirects to root Logout Flow: 1. User clicks logout on internal app 2. internal app: DELETE Redis session, CLEAR cookie, forward to login/logout 3. login app: DELETE Redis session (if exists), CLEAR cookie, redirect to root Benefits: - Users stay logged in across browser sessions (30 min TTL) - Complete SSO logout clears session from all domains - Auto-login improves UX (no repeated logins) - Direct Redis access (no SecurityService calls needed)