Check Login Credentials Without Logging In

Hey Everyone…

Is there a way to check the email and password given by a user are correct without actually logging them in?

Best wishes,
Antony.

You could log them straight back out again in the workflow ?

@NigelG… Yes I could, but I’m trying to make it all run as fast as possible, so I’d like to avoid a complete login and logout if there is a quicker way!

Aha !

https://bubble.io/reference#Actions.CheckUserPassword

I believe using the plugin Browser Storage could solve the challenge (with the encryption mode)

Hey @NigelG… thanks for that “aha” moment… but “check password for the current user” will require me to login in first, which I want to avoid…

And thanks for your idea @JohnMark… but I want to avoid using a plugin for this.

Any more ideas…?

Create your own cookie plugin or html call? You need to save on client browser private info and recall it back.

Here a long time later, but I agree that in a world of MFA, we need the ability to cleanly validate login credentials without fully committing to logging a user in. Please upvote my request for this: https://bubble.io/ideaboard?idea=1675483720960x783112719269101600

Hello, it’s been a long time since the post was created but I came across it in my research. I’ll take this opportunity to update it in case anyone passes by.

To detect whether a password is incorrect or otherwise, there’s a fairly simple way.

You need to add an “An unhandled error occurs” workflow that will perform an action if “Current Workflow’s Error’s code is INVALID_LOGIN_CREDENTIALS”.

This is the error code that displays the default message on Bubble. Then you take the action you like, for example, to secure an account, you count the number of unsuccessful login attempts, and after the 3rd one, for example, you send a magic link to your user.

Full native solution, no plugin, no hassle.

For your problematic @antony let’s just say we use “log user in” with email input and password input and juste handle the error with my solution. With that you can know if email and password given by a user are correct.