Skip to content

docs(auth): clarify login chain sequencing and security ordering requirements#58789

Open
joshtrichards wants to merge 3 commits intomasterfrom
jtr/docs-auth-login-chain
Open

docs(auth): clarify login chain sequencing and security ordering requirements#58789
joshtrichards wants to merge 3 commits intomasterfrom
jtr/docs-auth-login-chain

Conversation

@joshtrichards
Copy link
Member

  • Resolves: #

Summary

  • Refines Chain documentation to better describe its role in interactive authentication.
  • Documents phase-based sequencing in process() for readability and reviewability.
  • Clarifies command behavior (shared mutable LoginData, possible early return).
  • Adds concise inline notes for critical ordering constraints:
    • Flow v2 ephemeral session handling before standard token creation.
    • 2FA before remembered-login finalization.
  • No functional behavior changes; documentation/readability only.

TODO

Checklist

AI (if applicable)

  • The content of this PR was partly or fully generated using AI

Signed-off-by: Josh <josh.t.richards@gmail.com>
…ering reqs

Signed-off-by: Josh <josh.t.richards@gmail.com>
Signed-off-by: Josh <josh.t.richards@gmail.com>
@joshtrichards joshtrichards marked this pull request as ready for review March 8, 2026 16:55
@joshtrichards joshtrichards requested a review from a team as a code owner March 8, 2026 16:55
@joshtrichards joshtrichards requested review from CarlSchwan, come-nc, leftybournes and salmart-dev and removed request for a team March 8, 2026 16:55
namespace OC\Authentication\Login;

/**
* Orchestrates the login command chain in a security-sensitive order for interactive authentication.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

interactive authentication.

What does it mean?

->setNext($this->completeLoginCommand)
->setNext($this->flowV2EphemeralSessionsCommand)

// Phase 3: session strategy and token materialization
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

token materialization

What does it mean? Token creation?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants