Do not redirect to destination after failed login

Created on 24 July 2014, over 11 years ago
Updated 15 May 2025, 9 months ago

If a user attempts to log in from a slave site with a destination, and the login is unsuccessful (i.e., wrong password), Bakery redirects the user to the destination page anyway, with an error message. Instead, Bakery should redirect the user back to the login form with the error message, preserving the destination parameter.

For example, let's say we have an ecommerce site which is set up as a slave in Bakery:

1. We want to direct a user returns to their shopping cart after signing in. (http://somewhere.com/user?destination=cart)
2. User enters the wrong password.
3. Bakery redirects the user to the destination (/cart) instead of back to /user to fix their password.

โœจ Feature request
Status

Needs review

Version

3.0

Component

Code

Created by

๐Ÿ‡บ๐Ÿ‡ธUnited States msupko

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024