Hi! I need some help when implementing the setting...
# talk-kratose
early-intern-55372
07/29/2022, 1:06 PMHi! I need some help when implementing the settings flow for a react client side SPA. I am having troubles with the succession of api calls and the redirects when the session is no longer valid when updating privileged fields.
1. I am calling self-service/settings/browser
2. I use the return value to get the flow id and the csrf token
3. I call /self-service/settings with the flow id, the csrf token and a NEW PASSWORD
4. I receive error session_refresh_required with a redirect_browser_to url
5. I redirect to the specified url /self-service/login/browser which contains query params for refresh=true and a return_to url that is /self-service/settings
6. I log in with the user's credentials with refresh true
7. I call the /self-service/settings
8. The PASSWORD doesn't seem to be updated
I am probably doing something wrong?
early-intern-55372
07/29/2022, 1:52 PMThe flow that I am trying to implement is what can be seen in this video: https://www.ory.sh/docs/assets/medias/browser-privileged-update-1f0a8534724a1c3e63af722453ea483e.webm
early-intern-55372
08/01/2022, 11:22 AMPinging @magnificent-energy-493 and @steep-lamp-91158 as requested. How can we update privileged fields when the session is outdated. Client side SPA.
s
steep-lamp-91158
08/01/2022, 11:37 AM
the change is only persisted for privileged sessions, so the new password has to be stored after the login with
refresh=truesteep-lamp-91158
08/01/2022, 11:38 AM
we want to add a field to the
whoamisteep-lamp-91158
08/01/2022, 11:38 AM
or a timestamp until when it is privileged
steep-lamp-91158
08/01/2022, 11:39 AM
but that way you can determine BEFORE submitting the new password whether the
refresh=truee
early-intern-55372
08/01/2022, 12:42 PMI think I understand better. So currently the user has to live with the UX that he/she has to submit the new password twice: Once to initiate and a second time after refreshing the session.
early-intern-55372
08/01/2022, 12:42 PMThe video was giving the impression that the second submission would have been done automatically/in the background.
early-intern-55372
08/01/2022, 12:43 PMIs there an open github issue about adding the privileged: true key/value pair to
whoamis
steep-lamp-91158
08/01/2022, 12:59 PM
We had a private one, so I created https://github.com/ory/kratos/issues/2633
2 Views