Skip to content

fix(auth): open the iOS login page without the system sign-in alert - #551

Open
sol-wizard wants to merge 1 commit into
mainfrom
fix/login-ephemeral-session
Open

sol-wizard wants to merge 1 commit into
mainfrom
fix/login-ephemeral-session

Conversation

@sol-wizard

Copy link
Copy Markdown
Owner

Summary

  • iOS showed a system alert, "BlotzTask" Wants to Use "auth0.com" to Sign In, before the login page and again on logout. In the last 30 days 700 people tapped login and 438 finished. Most cancels happen within 15 seconds.
  • authorize() now passes ephemeralSession: true, which removes the alert. iOS only.
  • Logout skips clearSession() on iOS. An ephemeral login leaves no shared Safari cookie, and the call only produced the same alert.
  • Login buttons lock while authorize() runs, so a double tap no longer throws TRANSACTION_ACTIVE_ALREADY.
  • Trade-off: no shared Safari cookies, so Google users retype their credentials on first login. Google is 18% of logins.
  • Tested on a real iPhone: no alert on login or logout. Email, Apple and Google login all complete. Android not tested yet.

Release note

Logging in on iPhone is smoother: the login page now opens straight away, without the extra system prompt.

Status:

  • User-facing — announce it
  • Beta / partial — announce, but tagged as beta
  • Hidden in production (feature-flagged / not enabled for users) — don't announce
  • Internal only (refactor / infra / tests / CI / deps) — don't announce

🤖 Generated with Claude Code

iOS showed '"BlotzTask" Wants to Use "auth0.com" to Sign In' before the
login page and again on logout. Most cancelled logins happen within
seconds of that alert.

- authorize() now uses ephemeralSession, so no alert on login
- logout skips clearSession() on iOS: an ephemeral login leaves no shared
  Safari cookie to clear, and the call only produced the same alert
- the login buttons are locked while authorize() is in flight, which stops
  double taps from throwing TRANSACTION_ACTIVE_ALREADY

Trade-off: the login page no longer shares Safari cookies, so a Google
user retypes their Google credentials on first login.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown
Contributor

Test Results

126 tests   126 ✅  11s ⏱️
  1 suites    0 💤
  1 files      0 ❌

Results for commit 5402266.

@github-actions

Copy link
Copy Markdown
Contributor
Package Line Rate Branch Rate Complexity Health
BlotzTask 4% 34% 2743
BlotzTask 4% 34% 2743
Summary 4% (4584 / 113766) 34% (968 / 2830) 5486

@imlililili
imlililili self-requested a review September 18, 2026 10:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants