Future signup page idea #22

New Issue

BodgeMaster · 2021-08-18T20:00:16+02:00

BodgeMaster commented

2021-08-18 20:00:16 +02:00

see title

BodgeMaster added the

ToDo

label 2021-08-18 20:00:31 +02:00

BodgeMaster referenced this issue

2021-08-18 20:00:58 +02:00

Create secure and configurable signup feature #20

BodgeMaster added the

Priority: Normal

label 2021-09-02 06:23:43 +02:00

BodgeMaster commented

2021-09-09 11:21:06 +02:00

Poster

I have an idea regarding this:

Have sign up and user authentication controlled through a specified interface so that it is easy to create modules that hook into it instead of handling that inside ThreadR. There would still be a users table for everything else except authentication.

This would allow for things like "sigh up with GitHub / Google / whatever" or allow the admin who hosts an instance to run a CAPTCHA or verify email addresses externally.

ThreadR would only ship with three simple modules: "default", "default no CAPTCHA" and "default login only".
The "default" module would only accept a user name and a password as signup information and present the user with a CAPTCHA on user creation. The "default no CAPTCHA" is the same module just with the CAPTCHA stripped out and the "default login only" is the same but with signup stripped out completely.

While I would want ThreadR to support multiple modules being loaded at the same time, only the "default" module would be enabled by ... default.

I have an idea regarding this: Have sign up and user authentication controlled through a specified interface so that it is easy to create modules that hook into it instead of handling that inside ThreadR. There would still be a users table for everything else except authentication. This would allow for things like "sigh up with GitHub / Google / whatever" or allow the admin who hosts an instance to run a CAPTCHA or verify email addresses externally. ThreadR would only ship with three simple modules: "default", "default no CAPTCHA" and "default login only". The "default" module would only accept a user name and a password as signup information and present the user with a CAPTCHA on user creation. The "default no CAPTCHA" is the same module just with the CAPTCHA stripped out and the "default login only" is the same but with signup stripped out completely. While I would want ThreadR to support multiple modules being loaded at the same time, only the "default" module would be enabled by ... default.

BodgeMaster changed title from ~~scrap whatever is going on with the signup page rn, receiving an email is not a secure sanity check for us~~ to Future signup page idea

2023-01-07 01:30:56 +01:00

Sign in to join this conversation.