Authentication Flow
Entry Points
- Public login page:
https://marketplace-landing.digitizweb.com/login - Role/account chooser: available from the login page via the quick-login path
Observed Login Sequence
- Open landing login page.
- Announcement modal may block clicks until closed.
- Use the available role-based quick login path or the standard login form.
- Authentication establishes the backend session.
- User is redirected from landing domain to dashboard domain.
- Dashboard loads at
/dashboardwith role-specific navigation.
Redirect Behavior
Observed redirect chain:marketplace-landing.digitizweb.com/login- backend auth/session calls on
marketplace-backend.digitizweb.com marketplace-dashboard.digitizweb.com/- final dashboard route:
marketplace-dashboard.digitizweb.com/dashboard
Session Persistence
Session persistence is cross-subdomain and works after login.- Visiting
/loginwhile already authenticated redirects directly to the dashboard. - This indicates server/session awareness across landing and dashboard domains.
Role Switching Behavior
- No in-app role switcher was found.
- Practical role switching happens by starting a fresh session/context and selecting another role/account.
- Because authenticated
/loginrequests bounce back to the dashboard, switching roles in the same browser session likely requires logout or session replacement.
Login State Indicators
- Dashboard initials/avatar changes per account (
SA,JU, etc.) - Sidebar/menu layout changes by role
- Profile page shows explicit
Kontotyp
Security/Implementation Notes
- Pattern strongly matches a Laravel Sanctum SPA auth design.
- A dedicated backend shortcut endpoint is present for role-based quick-login flows.
- Unauthenticated
api/spa/userrequests return401, which is expected.
Screenshots
docs/screenshots/login-page.pngdocs/screenshots/login-page-no-announcement.png-
docs/screenshots/super-admin-after-login.png
docs/screenshots/private-after-login.pngdocs/screenshots/business-after-login.pngdocs/screenshots/business-pro-after-login.png
Visual Walkthrough
Login form
Post-login dashboards
