jacobwb / hashover-next

This branch will be HashOver 2.0
GNU Affero General Public License v3.0
420 stars 87 forks source link

Require login with magic email links (confirmed email addresses) #312

Open da2x opened 2 years ago

da2x commented 2 years ago

Instead of using passwords for logins, I’d like users to click on a confirmation link in an email to login. Clicking the Login button sends the email. Clicking the confirmation link logs you in.

So, after you post your first comment you’re sent a confirmation email. The comment is put in an unauthorized status (and not shown in the moderation queue). After the user clicks the confirmation link, they’re logged in and the comment switches status to pending or approved (based on the uses-moderation setting, of course). Only logged in users can comment (allows-login = 'required').

Two different email templates. One for pure login requests, and one for "click to confirm blah-blah required to publish your comment".