Open and close “Change Password” page from SDK

[fungc-io]

Problem

Some users wish to use our pre-built "Change Password" page but not the full "Settings" page.

Solution

• Provide authgear.open(Page.ChangePassword) in the SDKs
• When the change password page is opened by this approach, the user cannot navigate to the /settings page or other pages from the UI. After changing the password, in the success screen, the primary button will close the webview.

[IniZio]

Currently we use interaction to change password, with redirectURI hard-coded to /settings, can we pass custom redirectURI as follows?

authgear.open(.changePassword, escOnSuccess: true)

SDK will concat ?redirect_uri=%2F%3Ferror%3Dsuccess which replaces server side's redirectURI

authgear-server/pkg/auth/handler/webapp/settings_change_password.go

Line 78 in c536713

RedirectURI: "/settings",

[fungc-io]

Need to discuss how should web be handled

[IniZio]

After discussion:

• If page is opened in new tab, will close on success similar to other SDK's behaviours
• If page is opened in same tab, will try to pop history til original page

[fungc-io]

If pop history is not feasible, we may need to provide a field in the portal for "Post-change-password URL"..

[IniZio]

After testing implementation with web sdk, found original double redirect_uri approach hard to accommodate it. Also we want to let SDK user know whether user has finished the given settings action.

Will do following changes:

• Remove web SDK from current PRs since it will need special handling on history after success
• Pick up Specify settings action #2886 again, treating settings action as an intermediate before redirect URI
  • Update server impl to handle "x_settings_action" and allow "query" settings action success by auth code
• Update SDK to have explicit changePassword() method that resolves on oauth token verification and fails otherwise
  • iOS
  • Android
  • React Native
  • Capacitor
  • Flutter
• Implement WebSDK with explicit param to indicate preventing back to change_password page: 311bb3c)

[fungc-io]

@newman @louischan,

I found that the change password function is not on API reference yet.

https://authgear.github.io/authgear-sdk-js/docs/capacitor/classes/CapacitorContainer/

Is it available in the v2.7.0? If so, should we update the references?

[louischan-oursky]

Updated the API reference.

[fungc-io]

@newman @louischan For other SDK: iOS, Android, Flutter, do we need to update the version?
asking coz i saw that the last-update date for ios doc is 2023-01-12 https://authgear.github.io/authgear-sdk-ios/
and the publish date for flutter sdk on pub.dev is 4 months ago https://pub.dev/packages/flutter_authgear

[louischan-oursky]

iOS: Fixed a bug that docs was not deployed authgear/authgear-sdk-ios@458d4ba
Android: Added a job to deploy docs authgear/authgear-sdk-android@8463fbf
Flutter: Published 1.2.0 https://pub.dev/packages/flutter_authgear/versions/1.2.0

[fungc-io]

Thanks @louischan-oursky