Actions
Feature #15582
open[API] [Controller] Per-user client login permissions
Story points:
-
Release:
Release relationship:
Auto
Description
Much like Google does the first time you log in to a site with OAuth2, the controller/API should show a confirmation step if the current user has never logged in using the post-login redirect target's origin (scheme://host:port) and it's not "whitelisted":#3040.
Actions