search

YunoHost-Apps / ffsync_ynh

Mozilla’s Sync Server package for YunoHost
GNU Affero General Public License v3.0
15 stars 9 forks source link

Restricted authentication? #10

Open cheywood opened 5 years ago

cheywood commented 5 years ago

Hi, thanks heaps for all the work getting this going. I can report that it definitely does work, super easy install, nice work!

I was a little surprised though to find that the sync server on the yunohost instance accepted a sync request from a user with a different email address to any of the users on the instance. Is that the expected behaviour? I'd expected it to reject the sync request as the user didn't exist.

Norde commented 5 years ago

You can disable additional users by setting "allow_new_users" argument to false in "syncserver.ini" file (located under /opt/yunohost/ffsync).

You can set this option to false as soon as a first user has successfully synchronized.

It would be interesting to show this option in the ffsync web interface (for security reasons).

cheywood commented 5 years ago

Yeah I agree, exposing that sounds like a great idea :+1:

Josue-T commented 1 year ago

Mabe we can add a settings for this in the control panel.