Change password flow across devices

dan

I have a situation that is a bit confusing. I'm using the hosted login pages, and have both mobile and web apps.

I have users who start a change password flow on the mobile app, but then want to complete it on the webapp. The issue I'm running into is that the mobile app has a redirect that looks like fusionauth.demo:/oauthredirect but that doesn't work with the webapp, which looks like https://example.com/oauth-redirect.

So the password ends up being changed, but the user is not sent to the correct redirect URL and so is not logged in to our app correctly.

Any suggestions?

dan

You have a few options, none of them great.

You could look at using universal links and android app links to make sure the redirect URL for both mobile and web apps has the same format.
You could, on the Change Password Template, put in a message making it clear to users that if they started the change password flow on a mobile device, they should finish it on a mobile device (and same with web apps).
You could, on the Change Password Template, write javascript to examine the user-agent and the redirect URL. If they are incompatible, you could redirect the user to a device-compatible change password URL (basically by rebuilding the change password link they clicked on to start the flow and then doing a window.location=... call).