Open mikkokotila opened 1 year ago
a the They don't have passwordless, so maybe we just do password and SSO as they have design for that:
https://tailwindui.com/components/application-ui/forms/sign-in-forms
I think if we do SSO for Google and Facebook, that will cover almost everyone, and rest can just do with passwords. Adding this comment to the RFW as well, so you can make sure to reflect it in the RFC also.
Table of Contents
Housekeeping
ALL BELOW FIELDS ARE REQUIRED
The Problem
There has to be a means by which a user logs into DataHub.
User Story
The user comes to datahub.aecmaster.com and sees this login page but without the password field. The background image is randomly picked from 10 different images related to construction.
Request Type A/B
Type A: This request creates something entirely new.
Owner
mikkokotila
Summary
This request will add a new screen, which allows users to log in passwordless or with SSO (Google and Apple).
Is This Really Necessary?
A login screen is necessary, and making it passwordless seems to be the best way to future-proof the login approach. Adding SSO covers the drawback of sometimes issues arising with receiving the magic link.
Motivation
The user does not currently have any way to log in to DataHub and we don't have any way to protect the views from unauthorized use.
Named Concepts
passwordless means that the user can log in with a magic link without ever having a password.
SSO means single-sign-on (e.g. sign-in with Google)
Examples, Risks & Assumptions
The ability for users to log in without a password.
We don't have any way for users to log in.
Scenario A:
The user will come to the login screen. The user will then insert either their email address or phone number. They will then receive the magic link. The user clicks the link on their device. If the link is valid, the user then is allowed to come in.
Scenario B:
The user will come to the login screen. The user will click the SSO button of their choice. They will then go through the prompts of that SSO. If the sign-in is valid, the user then is allowed to come in.
This is available in the Figma mocks.
The ability to create/delete/update user accounts.
The system has to be a GDPR complaint.
There is no support function provided at this point.
NA
Success Metrics
The user is able to log in.
Conceptual Design
The user is provided with two different ways to log in:
Drawbacks
If the provider for the magic link has a problem, the user can't come in. This is why we provided SSO as a backup.
Alternatives
The alternative is to make either a password login or use just SSO.
New Data
Product release date
NA