Closed MatthewHeun closed 2 months ago
I think we should collect and maintain email addresses, but that doesn't mean they need to be the username. In addition to using email to contact users, email can be used for password resets.
I'm guessing Django includes all this sort of stuff (including confirmation of email) as part of its login module.
Is there any other information we want to collect on users? (Academic affiliation? Country? etc., etc.)
Institution and Country would be great. Could we ask for a couple sentences on their intended use of the data?
Email verification:
A UUID is generated for a user, which is only accessible in an email sent to the provided address. If the user goes to the correct link and presents that UUID (a link to this is generated for them and placed in the email), their account will be created.
Currently, these UUID to account associations are just stored in memory, so if the server goes down, the user would need to fill out the sign up form again. Perhaps we should move these to the database to be more persistent? Or could just be written to disk for the same effect.
Also currently, the emails are not actually sent. We need to authenticate with an SMTP server to truely send the emails. Right now, they're printed to the console. Should we piggyback off Calvin's ursa server? We would need to get authentication credentials.
Institution and Country are now asked for and recorded in the users database in the sign up form. An intended use section could easily be added now. If we did add it, would we want to make it optional? Or move it to a different location where a user could fill out personal information if they wish?
Some thoughts here:
STMP comment broken into its own issue @ #34
This issue has been open for a while. We should decide on exactly what information we want to collect from users at the signup page.
Currently it is unknown whether we will have users check a box at signup if they are IEA approved, but the other fields should be finalized.
Decided on:
No free form answers anywhere on the site (at least not for the next couple years)
Have a required drop down for institution type including
With an optional box for institution name
The above has been added and a full user signup process has been tested and successfully completed. Closing accordingly.
[x] Seems like we will want to contact users. Using an email address will allow us to do so.
[x] Also, we could verify email addresses when creating accounts.