search

jamesread / lanlist

http://lanlist.info - A List of LAN parties.
GNU Affero General Public License v3.0
1 stars 1 forks source link

Enhancement - Consideration to be made to switch Auth to Discord SSO #12

Open raz3r83 opened 4 months ago

raz3r83 commented 4 months ago

As per title it might be worth considering switching the auth and registration process to use Discord SSO, which already has MFA options and enables removing the email contact Nag from the accounts page.

Still allows for an account an additional values to be entered against the account that gets created.

ilumos commented 3 months ago

Adding Discord auth would be good to take advantage of their MFA, but I don't think it should be the only auth method, as not everyone has a Discord account. Allowing sign-in with Steam or Google would cover a few more bases, but allowing non-SSO accounts would still be good.

A way to avoid storing passwords is to allow people to sign up with email only, and each time they want to log in, the site sends an email with a magic link to their address. This is how https://healthchecks.io/ does it, and is quite a nice idea, and removes the need for password resets too.

All of these options add complexity however, and the time might be better spent elsewhere.