Cancel login from within a rule

[stephanie.chamblee]

Hi @yakir,

Unfortunately, rules run after authentication, and so redirecting back to the login page would go against the natural flow. When the UnauthorizedError is thrown in your rule, the user will be redirected to your app with the error message as a URL query string parameter.

Here is additional information from our FAQs:

Can I show errors raised in rules in the login page?

Question: Can I show errors raised in rules in the login page? Sometimes you have a rule that denies authorization, like this: function (user, context, callback) { if (someCondition) { return callback(new UnauthorizedError('You are now allowed.')); } return callback(null, user, context); ] Can that error be displayed in the login window? Answer: No (how’s that for a spoiler?) At least at the time of writing this, by the time rules run the authentication step (which is the responsi…