Idea: Extending "SPA"-like behavior for Mobile Apps?

Hi. To get right to the point, I posted my problem regarding my password reset woes on SO

But the broader topic for discussion is how to use FlaskSecurity as a JSON-base service when interfacing with a mobile app. Now, on the whole, it’s not so different: mobile service makes requests just like an SPA (or any UI service) would would make. But there are some pain points where the decisions made in FlaskSecurity are made strictly around the idea that it is serving or servicing a browser based application. I feel like there’s an opportunity to increase flexibility (like how behavior with spa was provided) that could make it more amenable to mobile applications. Password reset is my immediate sticking point, where I can’t deeplink into the mobile app immediately, nor can I decide when token validation occurs, but you all know more about the ecosystem and have better judgement for how this may fit into the broader scheme.

[TitaniumHocker]

First of all read this and that.

[chr0nikler]

Quick thinking - first - there is no reason not to allow for customization of the URLs sent in the email - I think its as easy as sending the ‘token’ into the template along with the computed link - if an app needs to fashion their own URL - they can create their own template and done.

Agreed, 💯

I haven’t seen many examples of account recovery just using a phone…

Same. I know I’m unique in this instance, and would actually prefer to move to a “reset password” flow within the app that is instigated once identity is recognized via a code received via text, if its needed at all (e.g, the experience is web and mobile). I saw the unified experience, and I definitely think that’s the way to go.