OpenUserJS / OpenUserJS.org

The home of FOSS user scripts.
https://openuserjs.org/
GNU General Public License v3.0
857 stars 305 forks source link

unregister / delete user #359

Open mploigt opened 10 years ago

mploigt commented 10 years ago

I can't find a way to delete my user account. How can I do this?

Martii commented 10 years ago

Related to #233

As I stated there a potential spammers haven especially with fly by account grifters.

mploigt commented 10 years ago

I'm sorry but I did not get what you want to say here. I'm just suggesting to add a function to unregister an account. Maybe mark all comments made with this account with "anonymous" in the progress.

Martii commented 10 years ago

Maybe mark all comments made with this account with "anonymous" in the progress.

Probably not. -1 here for this part.

I'm sorry but I did not get what you want to say here. I'm just suggesting to add a function to unregister an account.

And I responded clearly that you are asking to open the doors for spammers coming and and leaving constantly... especially with changing things to anonymous as you suggested. I'd be more open to the suggestion of permanent removal based off ones OAuth with no chance of recovery or any future access... although if one uses some common sense first by checking out a site before registration then there would be no need to have this feature request... but that's just me.

TimidScript commented 10 years ago

People can change their mind overtime and also I think one can tell the difference between spammers and legitimate requests. There should be a request form and the Admin should act accordingly.

Also what kinda of spammer creates an account and then deletes it? They usually create an account abuse it until it gets banned and then create another account. USO was a perfect example of that in action. Towards the end there was no need to create new account and the same accounts kept on spamming and filling the site with iffy scripts.

Martii commented 10 years ago

They usually create an account abuse it until it gets banned and then create another account. USO was a perfect example of that in action.

Actually it wasn't only this and I had some inside info. Point reiterated, in more generic terms, I believe we should have some sort of longer term consequence... e.g. perhaps 6 month expiry (leads into account expiration which we aren't quite there yet) or full ban which which we already have... it would be nice to have it automated instead of a request on production but if a security flaw is ever discovered with OAuth we could easily end up with zero accounts all of the sudden... so I'd rather not introduce that variable into the larger equation.

Also what kinda of spammer...

Think outside of the box. :)

decembre commented 9 years ago

Pff, i don't understand. I want use a simple way to login. Without have my email like usersname. No more.

I try to connect with github and i am redirect to my google login form ! Your Signing form was no very clear, and the login is the same for me.

Delete my account please......

Martii commented 9 years ago

Pff, i don't understand.

About what?

I want use a simple way to login.

https://github.com/OpenUserJs/OpenUserJS.org/issues/1#issuecomment-28166301

Without have my email like usersname.

I understand that some may not have seen the caution box that was added in https://github.com/OpenUserJs/OpenUserJS.org/issues/233#ref-commit-9d3619e . Unfortunately there is nothing I can do about it until both issues are assigned/completed/closed. Sorry.

my google login form

Just a side note see https://github.com/OpenUserJs/OpenUserJS.org/issues/484#issuecomment-69479725

Your Signing form was no very clear

"Sign up with a OAuth/OpenID service."... I can however link that into a page describing what that means without searching for that. That has been there the whole time I believe.

I wish I could help more but some portions are just out of my hands and I do apologize.

Martii commented 9 years ago

@decembre I also show your auth as github not google.

Martii commented 9 years ago

@decembre Just noticed you have two accounts. The one that matches your username here is googles auth. e.g. when you login with that username it will go to googles page. Please note that is deprecated. I'm attempting to familiarize myself with changing everyone to OAuth but it's still a bit out of my experience level at the moment. I have asked sizzle to attempt to do this again... in the meantime I will investigate hacking the DB again but there's a lot of portions of the code I am still unfamiliar with... e.g. there might be some unexpected consequences.

decembre commented 9 years ago

Thanks..... The @.... inside User name was a problem for me.

Martii commented 9 years ago

@decembre Make sure you can log in with your decembre account please and your other account will be removed by the normal means. I won't be doing this for everyone on demand because it takes a ton of time to do manually. Please respond by telling me you can login... your decembre account should be set to auth with GitHub now as default. Thanks.


P.S. I moved all found references from your old account to decembre too... deleted your one blank comment.


P.P.S. Looks like I have one more place to do this... complete.

decembre commented 9 years ago

I appreciate your effort for me: Thanks Marti ! That's good now, I can connect normaly now;

Sorry for your "spare time" lost. ;-)

Martii commented 8 years ago

I've had some chatting with @sizzlemctwizzle about this lately and a heck of a lot of time to think about this... and the best way I can see to alleviate concerns is a "Resign my account" (virtual or physical) authentication that one can add to the account. (e.g. resign access on our end point with OAuth)

This will provide a level of protection against "drive by" spamming and should alleviate "ghosted" posts from conversations on those who didn't think before they signed up and may have conversations with others that won't make as much sense if an account is deleted... e.g. as a User/Author... one can resign access to the account... if at a later date someone wants to come back in with that authentication then they may ask here on development.

Authors can still delete their scripts, etc. but to maintain the integrity, as much as possible, a resignation of ones account currently fulfills that request.

Please note I'm still working on other things but I am open to PR's to handle this virtually or physically (e.g. a resignation strategy that always returns fail... must include resignation date as well for the stored "key") ... if no requested assignments are available I'll eventually get around to it.

External site ref(s):

volconst commented 7 years ago

@Martii I have to admit that I have also made mistake at the registration and would like to have my account deleted or renamed. I have connected to OUJS also with this GH account. Is this sufficient to identify me and delete the account? How can I privately communicate you additional details you may need? Thank you

Martii commented 7 years ago

@volconst

or renamed

Doable.

privately communicate you additional details...?

Including your new username? e.g. how "paranoid" do you want to be? ;) :)

P.S. Btw do nothing on OUJS until this is possibly done as the DB modifications can be lengthy.

volconst commented 7 years ago

Not just paranoid, I feel also frustrated and ashamed and that's why I try to avoid publicity if possible. If it's the only option, I will post a user username here. What's even more dramatic is that both my identities will feel ashamed, actually me, myself and I.

Martii commented 7 years ago

@volconst Since another project has me publicly I've gone public on my profile for the time being.

Things you must do:

  1. Send me an email with your old OUJS username.
  2. Include your new username.
  3. Send a message here saying you did it immediately thereafter. e.g. I want to see the email first time stamped then confirmation here that you did it.
  4. If you don't do all of these, in this order, the namechange won't happen. You are quite stealthy already and I think you know that.
  5. You have a limited time before I reconsider making my profile less public.

Mistakes happen so don't beat yourself up. I see nothing wrong with your old username but since you approached nicely I'll grant one change.

volconst commented 7 years ago

@Martii Just sent the mail. Thank you for your time.

Martii commented 7 years ago

@volconst Ensure that you are logged out of OUJS and then relogin with your new username please.

volconst commented 7 years ago

This is cool - I have new username :) Have a great day!

decembre commented 7 years ago

Its a long time i don't login and i am a little bit confusing how it work. I don't want create an other account, Just login.

But at each time i choose the login form and in the 2th form i choose the google auth , and type my username (decembre)

I go to the sign in form ...

It's the right place to simply login ?

2016-11-23 22:25 GMT+01:00 volconst notifications@github.com:

This is cool - I have new username :) Have a great day!

On Wed, Nov 23, 2016 at 11:02 PM, Marti Martz notifications@github.com wrote:

Ensure that you are logged out of OUJS and then relogin with your new username please.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/OpenUserJs/OpenUserJS.org/issues/359#issuecomment- 262629178, or mute the thread https://github.com/notifications/unsubscribe-auth/ AUBnE27UbvrfNSN3NFke3xKVwFAzId8Sks5rBKnrgaJpZM4Cs3JD

.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/OpenUserJs/OpenUserJS.org/issues/359#issuecomment-262633546, or mute the thread https://github.com/notifications/unsubscribe-auth/AA1BqnG9RyeGmBM-iZmeJGI_sg-n6KOwks5rBK82gaJpZM4Cs3JD .

Martii commented 7 years ago

@decembre

I don't want create an other account, Just login. But at each time i choose the login form and in the 2th form i choose the google auth , and type my username

Use the upper input box with your username to "Login" and that should do it.