User redirected to reset password after adding a passkey

[natalian98]

After setting up a passwordless login method, the user is redirected to /ui/reset_password (the default settings url as specified in kratos config).
I think it would be better to redirect to /ui/setup_complete page instead, as the current sequence suggests users that the password should be changed in order for the previous settings to take effect.

Steps to reproduce:

1. Log in and go to https://iam.dev.canonical.com/stg-identity-jaas-dev-login-ui/ui/setup_passkey.
2. Type a key name (e.g. “test) and click on “Add security key” button.
3. Click on “Use phone or tablet” option in the browser pop up. Turn on bluetooth.
4. Scan the QR code from a phone or other webauthn-compatible device.

[syncronize-issues-to-jira]

Thank you for reporting us your feedback!

The internal ticket has been created: https://warthogs.atlassian.net/browse/IAM-1144.

This message was autogenerated

[edlerd]

The UI does not control the redirect target. The webauthn.js script comes out of kratos and posts directly to kratos/self-service/settings?flow=:flowId and this response is a HTTP 303 with Location: http://localhost:4455/ui/reset_password?flow=:flowid. So in order to go to the setup_complete route, kratos will have to respond with a different location header.