Skip to content

fix: use members SSO endpoints for webapp auth#36321

Open
wolfkill wants to merge 1 commit into
langgenius:mainfrom
wolfkill:fix/webapp-member-sso-endpoints
Open

fix: use members SSO endpoints for webapp auth#36321
wolfkill wants to merge 1 commit into
langgenius:mainfrom
wolfkill:fix/webapp-member-sso-endpoints

Conversation

@wolfkill
Copy link
Copy Markdown

Summary

  • Route external WebApp member SSO auto-login through the members SSO endpoints instead of console-oriented Web SSO endpoints.
  • Add a regression test covering SAML, OIDC, and OAuth2 protocols for the external member WebApp SSO flow.

Fixes #36307

Tests

  • PATH=/Users/cc/.cache/codex-runtimes/node22/node-v22.22.3-darwin-arm64/bin:$PATH pnpm --filter dify-web test "app/(shareLayout)/webapp-signin/components/__tests__/external-member-sso-auth.spec.tsx"
  • PATH=/Users/cc/.cache/codex-runtimes/node22/node-v22.22.3-darwin-arm64/bin:$PATH pnpm exec eslint "web/app/(shareLayout)/webapp-signin/components/external-member-sso-auth.tsx" "web/app/(shareLayout)/webapp-signin/components/__tests__/external-member-sso-auth.spec.tsx"
  • PATH=/Users/cc/.cache/codex-runtimes/node22/node-v22.22.3-darwin-arm64/bin:$PATH pnpm --filter dify-web type-check
  • git diff --check HEAD~1..HEAD

@wolfkill wolfkill requested review from douxc and iamjoel as code owners May 18, 2026 07:16
@dosubot dosubot Bot added size:XS This PR changes 0-9 lines, ignoring generated files. feat:webapp Ready-to-use AI web app. Also the "Preview" / "Debug & Preview" inside the orchestrate page. javascript Pull requests that update javascript code labels May 18, 2026
@github-actions github-actions Bot added the web This relates to changes on the web. label May 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

feat:webapp Ready-to-use AI web app. Also the "Preview" / "Debug & Preview" inside the orchestrate page. javascript Pull requests that update javascript code size:XS This PR changes 0-9 lines, ignoring generated files. web This relates to changes on the web.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

WebApp SSO: SSO login from app domain redirects user to console (should always use members endpoints for WebApp auth)

1 participant