Not that strange. Different users may belong to different groups which may have different authentication backends. The associated authentication method is brought up once a username has been provided.

[–] lime@feddit.nu 52 points 2 weeks ago (1 children)

if your choice of api route directly affects your auth flow something is very wrong.

[–] tazeycrazy@feddit.uk 1 points 2 weeks ago

I don't like it when I need to sign in twice for single sign-on. The email/username then tells the system if they need to be directed to another sign in page. Like Google or Microsoft. This then allows you access without having to give them your password.

[–] atomicbocks@sh.itjust.works 29 points 2 weeks ago

You can do that as part of an OAuth workflow. You don’t need to have them on separate pages for that to happen.

[–] paraphrand@lemmy.world 10 points 2 weeks ago

Yes, but, it also lets them slurp up email addresses. Routing users is legit tho.