hello, I’d like to implement a multi-step authentication flow. My use cases include:
A combined sign in / create account page that, after collecting the email, redirects to: Sign in (collect password, then possibly 2FA) Sign up (collect password, send OTP, verify OTP, then collect additional info) I don’t want to share the email or other sensitive data via query params or browser storage. Ideally, I’d like to use a temporary session with a session token in a cookie, so I can retrieve the state securely on each route.
Is there an easy way to do this, or do I need to create a custom plugin for this flow? Any recommended approach or example would be appreciated!
Recent Announcements
Continue the conversation
Join the Discord to ask follow-up questions and connect with the community