search

PuzzleServer / mainpuzzleserver

The main repo for the Puzzle Hunt and Puzzleday servers.
MIT License
9 stars 32 forks source link

Generate recovery link for mangled accounts #1073

Open tabascq opened 4 months ago

tabascq commented 4 months ago

Allow global/event admins to access any member of any team and click a "Generate Recovery link" button that makes a URL that can be pasted into an email. The URL should contain the PuzzleUser ID as well as some freshly-generated secret about the PuzzleUser (a GUID, perhaps) to prevent random internet hijacking. The web page corresponding to that URL should authenticate the user and then associate the PuzzleUser for that ID with the IdentityUserID that was just used to log in.

This can also be used to migrate logins from employee to alumnus, etc.

vidapour commented 1 week ago

needs Identity ID + User ID -- could use Identity ID as secret

reset buttons beside each account per user