Closed hmngwy closed 8 years ago
A thought --- you could let users register directly with their ssh keys and cut out the password mechanism entirely, since it seems to be causing some issues.
This requires everyone to have an ssh key set up, but it's a CLI blog app, after all, it's not targeting users who can't make their own. It also means that you lose access forever if you lose your SSH key, but personally I reset passwords that I forget much more often than I make a new public key.
@pscollins :+1: A curl command would do:
curl -F "usename=username" -F "public_key=@~/.ssh/id_rsa.pub" https://weblog.sh
@pscollins definitely considering that, the registration UI is having issues with some term setups, and I just want to get rid of it now.
@marksteve hmm, wondering why you suggest this? Just curious. Cause I think I can just wire up registration with the existing key setting command ssh walt@weblog.sh key $(cat ~/.ssh/id_rsa.pub)
.
@hmngwy no ident ssh access scares me :P Though yeah, the least deps the better. I actually tried running that command first before registering because I thought that would already register me.
@marksteve I see, it's a custom SSH server and the users won't be allowed to do anything beyond what is defined. I think it's relatively safer than a real no ident shell access.
ac4e6c8 pushed to live
Nice
On Tue, Nov 24, 2015, 18:20 Pat Pat Pat notifications@github.com wrote:
Closed #10 https://github.com/hmngwy/weblog.sh/issues/10.
— Reply to this email directly or view it on GitHub https://github.com/hmngwy/weblog.sh/issues/10#event-473111167.
Could be unnecessary, since #12 fixed.