All triggers

Below is a categorized list of event triggers. Triggers run server‑side and are configured like API Endpoints, but they execute automatically when their event occurs.

Authentication

On magic link requested

Runs when the Request magic link action is ran in a workflow in the interface.

Event data included: email, token, and url.

Common use: Send the email containing the link.

Redirect behavior:

• Redirect Page: used when the magic link is consumed successfully by an existing user.
• New User Redirect Page: used instead when the magic‑link flow creates a brand‑new user (first sign‑in). The server detects a “new session” and chooses this URL.
• Error Redirect Page: used when validation fails (expired/invalid token, domain mismatch, etc.).

Notes:

• When you select an internal page, WeWeb resolves it to a full absolute URL automatically (during preview it may include website id; in production it maps to the public path).
• You can also pass an external URL explicitly.

On OTP requested

Runs when a one‑time passcode is requested. Use to send the code and track attempts.

On before sign up

Runs just before a sign up is executed. Validate or veto the operation (e.g., password strength, domain allow‑list). Return an error to stop sign up.

On after sign up

Runs right after successful sign up. Use to create related records or send a welcome email.

On after sign in

Runs after successful sign in. Use to log activity, load user profile data, or update lastSeenAt.

On email verification requested

Runs when a verification email is requested. Use to send or customize the message.

On password reset requested

Runs when a password reset is requested. Use to send reset instructions.

On password updated

Runs after a password is successfully updated. Use to notify the user and audit the change.