#evan-express-accts
1 messages · Page 1 of 1 (latest)
hello, pasting your qs here
Authenticate the user in your application before redirecting them to this URL
Also:
Don’t email, text, or otherwise send account link URLs directly to your user. Instead, redirect the authenticated user to the account link URL from within your platform’s application.In our case each user has a unique link to our platform's invoice page with a direct access. The link consists of a hash of a sha256 string. Can we have your account link on this invoice page or should we authenticate the user first with credentials instead of having a direct link?
yeap!
In our case each user has a unique link to our platform's invoice page
if I got your user's unique link, can I hop on to your Platform invoice page, without needing that user's username/password etc?
yeap exactly
yeah that wouldn't be the right way to do AccountLinks, you'll need to do some authentication before presenting accountlinks