search

bueltge / authenticator

This plugin allows you to make your WordPress site accessible to logged in users only.
https://wordpress.org/plugins/authenticator/
GNU General Public License v3.0
24 stars 7 forks source link

[Feature Request]: Per-user auth tokens #39

Open u35253 opened 4 months ago

u35253 commented 4 months ago

Is your feature request related to a problem?

It is frustrating when each user has the same token appear in their Profile for RSS access.

Describe the desired solution

It would be better if each user received a unique token in their Profile for RSS access.

Describe the alternatives that you have considered

  1. I have considered using HTTPS Basic Auth per user, but would suffer from using the user's main actual user/pass creds in the URL.
  2. I have considered using the auth token option. However, the same token is used for access by all users, and, therefore, users who leave the private site would still have access unless the token were changed for everyone, which would be unnecessarily disruptive of most users' feed continuity.

Additional context

It would add some complexity to give users individual feed tokens, but this would be a great feature, and would really bring great functionality for private RSS feeds in WordPress, which seems surprisingly hard to find in a prebuilt, FOSS plugin.

I couldn't find any other FOSS WordPress plugin with private RSS feeds using tokens other than this ("authenticator") yet. The authenticator plugin is nice and simple, and works in the latest WordPress, too. But I would really like/need to have individual tokens for each user, not just one shared by everyone, so that individual user access could be revoked (e.g., when that user no longer has permission to access the RSS feed) without requiring all the other users to change the URLS in their feed readers!

Thanks for considering the request.

Code of Conduct