Support for Pre-authenticated URLs

[icamys]

Hi Ory team!

I'm considering using Kratos, and I have a question regarding the following case: I want to open a website from a native app in an authenticated state:

1. The user has the native app open and is authenticated in the app.
2. The user clicks "Go to website" in the app.
3. The app requests a link from the backend (potentially Kratos or a proxy backend server that talks to Kratos) that can open the website in an authenticated state.
4. The backend validates the request and responds with a pre-authenticated link to the app.
5. The app opens the link in the browser.
6. The browser is redirected to the website with the user authenticated.

I've noticed that Kratos supports code and link authentication methods that might be leveraged for this use case, but both have a connotation of "recovery" functionality. Do I understand correctly that these methods are intended also to address the described case, or is there a more effective way to do it? What are the general recommendations for addressing this use case?

Thank you!

[vinckr]

Hey @icamys

I would recommend to solve this with the code method. There is still one user interaction to confirm the code but overall it has much better UX than any links since it works cross device and does not get invalidated by email clients.

[icamys]

Hey @vinckr . Got it, thank you!