How to log in automatically?

Ask the community
, ,
1

How would I log in to my website by visiting the homepage? I would prefer not to use any 3rd party authenticators for the login.

Page code:

import wixUsers from 'wix-users';
import wixLocation from 'wix-location';
import wixMembers from 'wix-members';
import authentication from 'wix-members'
import { myGenerateSessionTokenFunction } from 'backend/login'
import { currentUser } from 'wix-users';
import { to } from 'wix-location';

$w.onReady(function() {
    if (currentUser.loggedIn) {
        // Redirect the user to the dashboard
        wixLocation.to('/dashboard');
    }
    $w('#registerNow').onClick(function() {
        let email = $w('#registerEmail').value;
        let password = $w('#registerPassword').value;

        wixUsers.register(email, password)
        .then(()=>{
            myGenerateSessionTokenFunction(email)
            .then((sessionToken) => {
                console.log(sessionToken)
                wixUsers.applySessionToken(sessionToken)
            });
            wixLocation.to('/profile-creation');
        })
        
    })
})

Backend code:

import { authentication } from 'wix-members-backend';

export function myGenerateSessionTokenFunction(email) {

  return authentication.generateSessionToken(email)
  .then((sessionToken) => {
    return sessionToken;
  })
  .catch((error) => {
    console.error(error);
  });
}

/* Promise resolves to a session token:
 * "JWS.eyJraWQiOiJQSXpvZGJiQiIsImFsZyI6IkhTMjU2In0.eyJkYXRhIjoie1wiaWRcIjpcImM2OTE2N2FmLTY0ODgtNDYzNS1iYmU3LTg5YzFjZWY2MTEwN1wiLFwiY29sbGVjdGlvbklkXCI6XCI5YmVjNThlNi02NDExLTQ5OTEtOGU1ZC0wYWRhOTE4MmI5NWVcIixcIm1ldGFTaXRlSWRcIjpcIjFmZjQ2YTk2LWRlYTYtNDlkYS04M2JhLTUxNjRmYjYyZDgzOVwiLFwib3duZXJcIjpmYWxzZSxcImNyZWF0aW9uVGltZVwiOjE2MjI0MDMwOTM5MTEsXCJleHBpcmVzSW5cIjoxMjA5NjAwMDAwLFwiZXhwaXJhdGlvblRpbWVcIjoxNjIyNDAzMjEzOTExLFwibGFzdFJlZnJlc2hlZFwiOjAsXCJhZG1pblwiOmZhbHNlfSIsImlhdCI6MTYyMjQwMzA5M30.xDMCeRG2DIDa4YR6_XuTf7KBRgHFb0qW7K6gsVMLXUM"
 */
2

The only way to make a an automatic login i know is to get the IP.
But is the IP always the same constant IP ??? I don’t know.

If not logged in you get something like…
“JWS.eyJraWQiOiJQSXpvZGJiQiIsImFsZyI6IkhTMjU2In0.eyJkYXRhIjoie1wiaWRcIjpcImM2OTE2N2FmLTY0ODgtNDYzNS1iYmU3LTg5YzFjZWY2MTEwN1wiLFwiY29sbGVjdGlvbklkXCI6XCI5YmVjNThlNi02NDExLTQ5OTEtOGU1ZC0wYWRhOTE4MmI5NWVcIixcIm1ldGFTaXRlSWRcIjpcIjFmZjQ2YTk2LWRlYTYtNDlkYS04M2JhLTUxNjRmYjYyZDgzOVwiLFwib3duZXJcIjpmYWxzZSxcImNyZWF0aW9uVGltZVwiOjE2MjI0MDMwOTM5MTEsXCJleHBpcmVzSW5cIjoxMjA5NjAwMDAwLFwiZXhwaXJhdGlvblRpbWVcIjoxNjIyNDAzMjEzOTExLFwibGFzdFJlZnJlc2hlZFwiOjAsXCJhZG1pblwiOmZhbHNlfSIsImlhdCI6MTYyMjQwMzA5M30.xDMCeRG2DIDa4YR6_XuTf7KBRgHFb0qW7K6gsVMLXUM”

…as you already metioned. Check if this result is a constant result for each user.
If so, maybe this could be the solution for your problem.

If it is not user-specific, then you have a problem.

How the system shall recognize the member without any data of the user?

No e-mail.
No password.
No IP —> ??? —> maybe ???
No other informations about user over third-party.
No nickname.
No constant TOKEN ??? —> ??? —> maybe ???

How to recognize the user without at least one information about current user?