Login Component: Difference between revisions
No edit summary |
No edit summary |
||
Line 53: | Line 53: | ||
== Session Key == | == Session Key == | ||
The login component generates a sessionKey, a hashed cookie-like string that sticks to the user's browser and has a set expiration date. The Login Component has the ability to check the validity of the sessionKey, and through Apex, developers can also use the sessionKey to extract the contact Id of the logged in user: <code>RemoteUtils.getContextUserContactId(String sessionkey);</code> | The login component generates a sessionKey, a hashed cookie-like string that sticks to the user's browser and has a set expiration date. The Login Component has the ability to check the validity of the sessionKey, and through Apex, developers can also use the sessionKey to extract the contact Id of the logged in user: <code>RemoteUtils.getContextUserContactId(String sessionkey);</code> | ||
== Login, Register and Reset Password == | |||
The login component allows user login, by using a Contacts for authentication. Here's a map of the fields involved in the authentication: | |||
- Username is the Contact.Email | |||
- Password is the Contact.b3o__Password__c, | |||
- Veri Code (verification code) is the Contact.b3o__Temporary_Password__c | |||
'''''Note, that when the user requests password reset, the field b3o__Temporary_Password__c is set to a numerical value. The implementation team/developers would need to create a Flow/Automation to send an email to the Candidate with the value from that field. Each un-successful attempt to verify the veri-code will issue a new veri-code, so a new email should be sent.''''' | |||
== Conclusion == | == Conclusion == |
Revision as of 09:14, 3 October 2023
Intro
The LoginComponent
serves as a powerful solution for session management on web pages. It facilitates user login/registration and manages user sessions. When a user is not logged in (as determined by the absence of a sessionKey
in the local storage), this component can be utilized to prompt users to login or register. Upon successful login or registration, the component updates the sessionKey
in local storage and fires a sessionUpdate
event.
The login component lives on every 3B Portal page and monitors for active user sessions. Currently this component cannot be overriden in a 3B Portal context.
Attributes
User Settings
user-id
: The unique ID of the user.
Interface Configuration
backdrop
: Determines whether a backdrop appears behind the login component when it's active (true
by default).allowRegistration
: If set totrue
, allows users to register (default istrue
).allowPassReset
: If set totrue
, allows users to reset their passwords (default istrue
).
Label Customization
The component offers a range of labels that can be customized to fit your brand or language requirements. Some examples include:
labelGeneralError
: Message displayed when a generic error occurs.labelNoUserFound
: Message displayed when a user is not found.- ... (and many more label attributes for various functionalities).
Implementation Guide
1. Checking for an Active Session
Before allowing users to perform certain actions, such as applying for a job, you need to check whether they have an active session. To determine this:
if (!localStorage.getItem('sessionKey')) {
// User is not logged in
}
2. Embedding the LoginComponent
if (!localStorage.getItem('sessionKey')) {
const loginComponent = document.createElement('login-component');
document.body.appendChild(loginComponent);
}
3. Listening for the Session Update
The LoginComponent
dispatches a custom event named sessionUpdate
once the user successfully logs in or registers. By listening for this event, you can take subsequent actions:
document.addEventListener('sessionUpdate', (event) => {
console.log('Received session update:', event.detail);
// Now you can perform actions like loading the job application form or any other user-specific content.
});
4. Using the Session Key with Other 3B Components
All other 3B components rely on the sessionKey
in local storage to identify the user. Once the LoginComponent
sets this key, other components can seamlessly recognize the user and deliver personalized content or functionalities.
Session Key
The login component generates a sessionKey, a hashed cookie-like string that sticks to the user's browser and has a set expiration date. The Login Component has the ability to check the validity of the sessionKey, and through Apex, developers can also use the sessionKey to extract the contact Id of the logged in user: RemoteUtils.getContextUserContactId(String sessionkey);
Login, Register and Reset Password
The login component allows user login, by using a Contacts for authentication. Here's a map of the fields involved in the authentication:
- Username is the Contact.Email
- Password is the Contact.b3o__Password__c,
- Veri Code (verification code) is the Contact.b3o__Temporary_Password__c
Note, that when the user requests password reset, the field b3o__Temporary_Password__c is set to a numerical value. The implementation team/developers would need to create a Flow/Automation to send an email to the Candidate with the value from that field. Each un-successful attempt to verify the veri-code will issue a new veri-code, so a new email should be sent.
Conclusion
By integrating the LoginComponent
into your web page, you establish an effective session management mechanism that enhances user experience. It ensures users are properly authenticated before granting them access to specific functionalities. Always make sure to listen for the sessionUpdate
event to stay informed about changes in the user's session status.