aaronpk / indielogin.com

Sign in with your domain name
https://indielogin.com
MIT License
149 stars 24 forks source link

Authenticating by Email - only needed for initial registration? #79

Closed tunetheweb closed 2 years ago

tunetheweb commented 2 years ago

If authenticating by email is it necessary to keep the <a href="mailto:me@example.com" rel="me">me@example.com</a> on the website after registration? Or can we remove it after registration? Or is it rechecked for each authentication?

Just trying to avoid spam bots picking up the email by leaving it in the HTML source.

aaronpk commented 2 years ago

There is no "account" at indielogin.com, you have to authenticate via one of the methods each time you log in to a site. If you want to use the email method it will need to be present there all the time. One solution is to use an email address specifically for indielogin.com, and then reject all emails to that address unless they come from indielogin.com

tunetheweb commented 2 years ago

Thanks for the quick reply!