Persistent Session Cookie Implementation for SSO on React Dashboard

Feature Enhancement: Persistent Authentication State for SSO

We have identified a limitation within our React dashboard's Single Sign-On (SSO) functionality. Users are currently required to re-authenticate each time they access their Frappe site instances via the SSO buttons, due to the lack of a persistent session cookie that would maintain their authenticated state.

Current Challenge

The absence of a persistent session cookie means the system does not remember previous SSO usages within the same session. Consequently, users face the inconvenience of repeated login prompts when navigating between the React dashboard and Frappe framework.

Desired Solution

We need to implement a mechanism that retains the user's session state across different instances of our applications. This would allow users to utilize SSO to switch between the React dashboard and Frappe framework seamlessly, without repeated re-authentication.

Possible Approaches

Leverage session tokens that are stored securely and transmitted with each request to validate the session.
Use local storage or similar browser storage mechanisms to keep the authentication state alive during the session.

Goals

Enhance user experience by reducing the need for multiple logins during the same session.
Maintain a high level of security while implementing persistent sessions.
Ensure compatibility across different browsers and devices.

Action Items

Investigate the best approach to maintain a persistent session state.
Implement the chosen solution while ensuring security best practices.
Test the new system thoroughly to confirm that users can navigate between apps without unnecessary re-authentication.

Importance

This enhancement is crucial for providing a smooth and efficient user experience and will significantly improve our platform's usability.

Request for Implementation

Please prioritize this improvement in the SSO functionality to facilitate better user flow and retention.

Thank you for your commitment to improving our platform's accessibility and user satisfaction.

zaviagodev / frappe