Login Flow: redirect back to article if user is already logged in about samples HOT 1 OPEN

@sebastianbenz This is not 100% accurate, so I wanted to first confirm the technicals here. In the example you describe, if user is already logged in with publisher backend and the user is accessing the CDN document in the same browser context then regardless of the 3rd party iframe or not - the authorization request will see all the publisher's cookies (assuming they are set of the same or a parent domain).

The situation you describe would happen if the login dialog were to open in a different browser context. For instance, if we were to open the document in a WebView and open the login dialog in SFSafariViewController or CCT. Then - correct, your case applies and the expectation is that the user will be automatically logged in. Besides prototyping it this way, we can also emulate this case by putting authorization and login endpoints on different domains. If possible - then definitely, it would be a good example. Not sure if this would be easy enough to set up without over-bloating the sample code.

Another option I'm trying to pursue is to have iGSA folk to create SFSafariViewController-based login flow via an experiment - but I don't know the timing on that yet.

One thing you could do now is simply open your sample site on a separate domain for testing. This way you can emulate separate browser context.

from samples.