Flow Before Version 1.59.1
- Open the registration page.
- Click "Google" (or another OAuth identity provider).
- Authorize with Google.
- Get redirected to the provided URL (my app).
This flow was simple and straightforward.
Flow After Version 1.59.1
- Open the registration page.
- Click "Google" (or another OAuth identity provider).
- Authorize with Google.
- The
/oauth2/complete-registration
page opens. - The user is forced to provide a password (Why? The user wants to log in with Google and shouldn't need a password at this point. We don't need it either).
- The user clicks "Submit" on the complete registration page.
- The Sign In page opens (Why? The user should already be signed in).
- The user has to sign in again (Why? How do we explain that this is expected behavior and not a bug, especially right after a successful registration?).
- Finally, the user is redirected to the provided URL (my app).
This adds unnecessary complexity and confusion. How can we avoid the complete registration page and redirect the user straight to the app? It's acceptable for the user to see the complete registration page, but it is not acceptable to force them to sign in again.