Authentication Flow

Entry Points

  • Public login page: https://marketplace-landing.digitizweb.com/login
  • Role/account chooser: available from the login page via the quick-login path

Observed Login Sequence

  1. Open landing login page.
  2. Announcement modal may block clicks until closed.
  3. Use the available role-based quick login path or the standard login form.
  4. Authentication establishes the backend session.
  5. User is redirected from landing domain to dashboard domain.
  6. Dashboard loads at /dashboard with role-specific navigation.

Redirect Behavior

Observed redirect chain:
  • marketplace-landing.digitizweb.com/login
  • backend auth/session calls on marketplace-backend.digitizweb.com
  • marketplace-dashboard.digitizweb.com/
  • final dashboard route: marketplace-dashboard.digitizweb.com/dashboard

Session Persistence

Session persistence is cross-subdomain and works after login.
  • Visiting /login while already authenticated redirects directly to the dashboard.
  • This indicates server/session awareness across landing and dashboard domains.

Role Switching Behavior

  • No in-app role switcher was found.
  • Practical role switching happens by starting a fresh session/context and selecting another role/account.
  • Because authenticated /login requests bounce back to the dashboard, switching roles in the same browser session likely requires logout or session replacement.

Login State Indicators

  • Dashboard initials/avatar changes per account (SA, JU, etc.)
  • Sidebar/menu layout changes by role
  • Profile page shows explicit Kontotyp

Security/Implementation Notes

  • Pattern strongly matches a Laravel Sanctum SPA auth design.
  • A dedicated backend shortcut endpoint is present for role-based quick-login flows.
  • Unauthenticated api/spa/user requests return 401, which is expected.

Screenshots

  • docs/screenshots/login-page.png
  • docs/screenshots/login-page-no-announcement.png
    • docs/screenshots/super-admin-after-login.png
  • docs/screenshots/private-after-login.png
  • docs/screenshots/business-after-login.png
  • docs/screenshots/business-pro-after-login.png

Visual Walkthrough

Login form

Login page

Post-login dashboards

Super Admin dashboard Private dashboard