#evan-express-accts

1 messages · Page 1 of 1 (latest)

unborn osprey
#

hello, pasting your qs here

Authenticate the user in your application before redirecting them to this URL
Also:
Don’t email, text, or otherwise send account link URLs directly to your user. Instead, redirect the authenticated user to the account link URL from within your platform’s application.

In our case each user has a unique link to our platform's invoice page with a direct access. The link consists of a hash of a sha256 string. Can we have your account link on this invoice page or should we authenticate the user first with credentials instead of having a direct link?

acoustic ocean
#

yeap!

unborn osprey
#

In our case each user has a unique link to our platform's invoice page
if I got your user's unique link, can I hop on to your Platform invoice page, without needing that user's username/password etc?

acoustic ocean
#

yeap exactly

unborn osprey
#

yeah that wouldn't be the right way to do AccountLinks, you'll need to do some authentication before presenting accountlinks