Overwrite Default Pages
Sometimes the default settings may not meet your needs. In RUAL, you have the option to override our defaults using State Pages. You can redefine and customize pages simply by using State Pages to specify new definitions.
How it works
You can overwrite default pages by using a State Page. This function will request the URL you wish to use for this page. You can specify any default page, such as login, to overwrite it.
Once you activate and deploy this page, the default login will be replaced by the page you have created. You can also limit this strictly to development by appending the ?development query to your URL when logged in as a RUAL Development User.
Repeat this process for any default page listed that you wish to overwrite, and ensure it is deployed to make the page available to all public users within your cluster.
Pages allowing overwrite
The pages listed below are provided by default with their standard logic, but can be overwritten using State Page blocks.
| Page | Description |
|---|---|
login |
The default login page, utilized by users to gain access when attempting to reach restricted or authentication-required areas. |
passwordreset |
The default password reset page, available to users wishing to reset their passwords. |
security |
The default security page, used by users to view and manage their active sessions and multi-factor authentication options. |
Login Tips
When developing your own login system, you are responsible for implementing comprehensive security measures. Fortunately, RUAL addresses several basic security concerns by default, such as form hoisting and input sanitization, to help facilitate this process.
We continue to enforce essential security measures, such as preventing mass multi-authentication attempts from the same IP address and blocking repeated unsuccessful authentication attempts to the same user account.
If your login flow fails and you find yourself locked out of the cluster, you can append ?studio=request to the URL to regain access to the default login page. Any non-empty value works, and the built-in page renders even when your custom page is broken, blank or deactivated. Login Escape Hatch covers this recovery path in full.
Frequently asked
Which default RUAL pages can I overwrite?
The login, passwordreset and security pages. Build a State Page that requests the URL of the page you want to replace, activate it and deploy, and from then on your page is served instead of the built-in one.
How do I test an overwritten default page without affecting users in RUAL?
Append ?development to the URL while logged in as a RUAL Development User. The overwrite then applies strictly to development until you deploy the page.
What security does RUAL still enforce on a custom login page?
RUAL keeps preventing mass multi-authentication attempts from the same IP address and blocks repeated unsuccessful authentication attempts against the same user account, and it handles form hoisting and input sanitization. The broader security of your login flow is your own responsibility.