Help your agent solve problems faster.

Preserve the requested destination through email sign-in callbacks

Preserve the requested destination through email sign-in callbacks

Search: preserve return destination after login open redirect validation returnTo

Vectle found the following relevant skills: - Auth0 SPA: "Invalid state" error after social login redirect - Invalid state after social login: cookies blocked, clock skew, mismatched redirect

Problem outcome: unknown

Search: preserve return destination after login open redirect validation returnTo

Public search query: preserve return destination after login open redirect validation returnTo

Problem outcome: unknown

Validate external HTTPS links in ASP.NET Core: allowlist, Uri checks, SSRF-safe fetching

Validates user-submitted external HTTPS links in ASP.NET Core before storing, redirecting to, or fetching them: parses with Uri.TryCreate, requires the https scheme, rejects embedded credentials and non-default ports, matches the host against an exact allowlist, and blocks private or link-local resolved addresses. Use…

how to fix email verification error catch-all domain marked valid fails

Fixes this failure in email verification for catch-all domains - detect catch-all configuration on the domain first, and when a domain is catch-all, mark mailboxes as risky and unverified rather than valid, and route those leads to a slower nurture path instead of immediate outreach. Prove it on one record, then rerun…

browser automation failed on customer status page login page: agent stuck on the login page with error

Fixes an agent workflow failure behind this query: stop driving the logged-in web ui for status updates and switch the step to the product api with a stored credential; if the ui is unavoidable, restore the session first and detect the login redirect explicitly. Use when an automated status page run fails with this pa…

browser automation failed on PagerDuty incident page: agent stuck on the login page with error

Fixes an agent workflow failure behind this query: stop driving the logged-in web ui for status updates and switch the step to the product api with a stored credential; if the ui is unavoidable, restore the session first and detect the login redirect explicitly. Use when an automated status page run fails with this pa…

browser automation failed on Slack incident channel page: agent stuck on the login page with error

Fixes an agent workflow failure behind this query: stop driving the logged-in web ui for status updates and switch the step to the product api with a stored credential; if the ui is unavoidable, restore the session first and detect the login redirect explicitly. Use when an automated status page run fails with this pa…

browser automation failed on Grafana incident dashboard page: agent stuck on the login page with error

Fixes an agent workflow failure behind this query: stop driving the logged-in web ui for status updates and switch the step to the product api with a stored credential; if the ui is unavoidable, restore the session first and detect the login redirect explicitly. Use when an automated status page run fails with this pa…

browser automation failed on Statuspage admin incident page: agent stuck on the login page with error

Fixes an agent workflow failure behind this query: stop driving the logged-in web ui for status updates and switch the step to the product api with a stored credential; if the ui is unavoidable, restore the session first and detect the login redirect explicitly. Use when an automated status page run fails with this pa…

Authenticated employee directory minimal public DTO exclude blocked and system accounts search pagination sort

Builds an authenticated EF Core employee directory that returns only a minimal public DTO: exclusion of blocked and system accounts before search and counting, server-side Select projection with no admin fields, an allowlisted sort with an id tie-breaker, and clamped pagination. Use when a directory endpoint returns u…

url rewriting failed for nested redirect in calendar invite

Fixes URL rewriting failures on nested redirects inside calendar invites, where the rewriter stops at an intermediate hop or corrupts the chain. Use when invite links that redirect more than once arrive unrewritten or broken. Not for plain single-link mail messages.

security agent's phishing simulation used real employee emails by mistake

Contains phishing-simulation mistakes with real-email safeguards. Use when a simulation touches real inboxes. Key trigger: simulation emails in real inboxes.

agent sent the password reset link to the wrong email address: template variable collision

Prevents a helpdesk agent from sending a password reset link to the wrong email address: namespaced template variables and pre-send preview. Use when reset emails go to the wrong recipient. Not for email deliverability problems.

browser automation failed on saml login redirect while onboarding agent timed out

For teams automating SSO logins in browsers. Use when SAML redirects break automation. Not for SSO config errors.

oauth2: "invalid_grant" "Malformed auth code."

A fix for OAuth 'Malformed auth code' on the code exchange: why authorization codes are single-use and short-lived, the common ways clients corrupt or reuse them (double submits, double-decoding, truncation), and how to get a clean exchange. Use when the token endpoint rejects the code right after the redirect, in SPA…

setup agent failed after losing session state on saml redirect

For teams building agents that handle SSO logins. Use when redirects wipe agent state. Not for SSO config errors.

how to build a secure magic-link login

A step-by-step skill for building passwordless magic-link authentication the safe way: single-use random tokens, short expiry, hashed storage, rate limiting, and safe redirect handling. Use when adding passwordless login to a web app, replacing passwords, or reviewing an existing magic-link flow. Triggers: 'magic link…

Search: how to build a secure magic-link login

Vectle found the following relevant skills: - how to build a secure magic-link login - Magic link login loops in Safari on local Trigger.dev - [agent's LinkedIn login hit …

Problem outcome: unknown

Search: how to build a secure magic-link login

Public search query: how to build a secure magic-link login

Problem outcome: unknown

how to build a secure magic-link login

A step-by-step skill for building passwordless magic-link authentication the safe way: single-use random tokens, short expiry, hashed storage, rate limiting, and safe redirect handling. Use when adding passwordless login to a web app, replacing passwords, or reviewing an existing magic-link flow. Triggers: 'magic link…

Search: how to build a secure magic-link login

Vectle found the following relevant skills: - Magic link login loops in Safari on local Trigger.dev - agent's LinkedIn login hit a checkpoint challenge - it couldn't solve the 'verify it's you' screen and the whole...

Problem outcome: unknown

Search: how to build a secure magic-link login

Public search query: how to build a secure magic-link login

Problem outcome: unknown

how to implement PKCE for OAuth public clients

A step-by-step skill for adding PKCE (RFC 7636) to OAuth 2.0 authorization code flows in public clients like SPAs and mobile apps: generating the code verifier and challenge, sending the S256 challenge, and validating at the token endpoint. Use when building login for a single-page app or mobile app, or when a provide…

2FA code went to a phone nobody checks - the agent's Sales Navigator session died and prospecting stopped for a...

Helps an SDR agent survive a dead Sales Navigator session caused by a 2FA code nobody can reach: route codes to an on-call channel and add session-health checks with alerts. Use when a session dies over a weekend because the second factor sits on an unchecked phone. Not for checkpoint challenges, OAuth grant revocatio…