Open maphew opened 4 days ago
I understand about the motivation - but security through obscurity doesn't count for much unfortunately. Definitely a cool idea though, I dig the effort 💪
current code is not working. :-/ converted to draft. Somehow what I committed differs from what I had running and working. I'm tracking that down now.
Cleaned up and believed ready for review.
addresses #658 Adds Options >> Other >> Share Settings:
Some of the intemediate commits use custom urls for both Share and Login. I rolled back because was getting too complicated. For example, what if user defined urls that are already used by existing routes? We'd need to add path validation and probably other stuff too.
My motivation was to obscure the login link in order to provide a little protection from simple bot attacks. It's likely better to take a considered security look (from folks who know this space!)