manningwu07
commented
1 month ago Email auth has been added, and there is a forget password with infinite number of attempts (gotta fix for security issues later but...) so this isn't really nessecary. We also have OAuth for google.
Needs to be discussed whether this is even a good idea since we need an email client to send these emails from.
If this is something we want to do then we need to customize the email so it fits the brand. I can do this if its decided that magic links are good. Also need to set up some sort of database check so if the email is new they get sent to a registration page.
Personally I think its worth the effort to set up a good, secure email password login system and I'm willing to do it. But this could still be a nice alternative even if email password auth is setup.