Passwordless Login 2.X MODX

Security
1

I see in the MODX3 documentation that there will be an option to allow for passwordless logins. That is great, but is there a way to allow for this in MODX 2.X using the Login snippet?

2

Hi Clutchmarketing

We are all looking forward to this new feature in MODX3 but at the moment, there isn’t a native way to do passwordless authentication that I am aware of. I know of an external service that is OAuth 2.0 and Open ID Connect compatible and does passwordless sign in using magic links AND device authentication.

What’s the use case? Are you trying to go for user convenience or more of a security angle?

I am part of the way through setting up https://did.app with the login snippet but I’m not quite finished yet. Maybe if we collaborate we can get DID.app to work with the snippet and we’ll both be off the races. Feel free to notify me, can set up a call if helpful.

3

Hi,

Have you tried anything like this with Login / ResetPassword?

Reading the doc ResetPassword - Login | MODX Documentation
it seems user can be automatically logged after having clicked on the emailed link.

Then I’m also thinking to use it as a pseudo-passwordless login for front.

4

Just tested, it works perfectly as a password less front login by adding

[[GotoURL? &gotoURL=`[[+loginUrl]]`]]

to the lgnResetPassTpl chunk (ResetPassword - Login | MODX Documentation) with option

&autoLogin=`1`

For a password less login to the MODX manager if you can specify the autoLogin context and replace [[+loginUrl]] by your manager URL, it should work.