JUST REPOSTED THIS AS FEATURE REQUEST SO PLEASE ADD KUDOS THERE

https://community.weebly.com/t5/Vote-on-Features/DEVELOPERS-links-to-page-inside-app-in-a-specific-s...

The situation:

The app server needs the user to do something, so it sends an email to the user with a link to a page inside the app. Say https://myapp.com/do/something

The problem:

If the user is not logged in to weebly and the app, it will fail.

The bad solution:

To send the JWT token in the link. https://myapp.com/do/something?jwt=...

This is a security problem: anybody who sees the email can have access to the app.

The other bad solution (my current solution):

To say to the user "please log in to weebly to this site and app before opening the link". My experience is people will not always read this. Sometimes people will be logged in to the same app in another site and the link will work but they will take action in the wrong site.

Real life example:

People have two sites and they get a link to pay to renew the subscription in one site but they end up paying (again) in the other site. Ending with a site who is expired and another site renewed twice.

Proposed solution:

Have some kind of weebly link that will make sure that the user is logged in to a specific site and app:

https://www.weebly.com/app_link?site_id=12345&app_ip=12345&link_inside_app=/do/something

So:

- if the user is not logged in to weebly, they can enter credentials to weebly

- if the user is not editing this site, they can enter this site

Then weebly can send the user to the app's URL with the JWT and the path /do/something

Did you guys stumble upon this problem? Maybe you solved this in another way.