Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow site key reset by sending a link to maintainer email. #19

Open
hategan opened this issue Apr 2, 2022 · 0 comments
Open

Allow site key reset by sending a link to maintainer email. #19

hategan opened this issue Apr 2, 2022 · 0 comments
Labels
enhancement New feature or request

Comments

@hategan
Copy link
Collaborator

hategan commented Apr 2, 2022

Clients use a randomly generated persistent key to authenticate with the service. If this key is lost, the service will not accept results with a new key for a certain period (10 days). In many cases, it would be nice if this period can be securely reduced.

One possibility is by providing a key reset option that allows a maintainer to input their email address. This email address would then be checked against the stored maintainer email address and an email with a reset link with a random token be sent to it. If the link is clicked within some reasonable amount of time, the site key should be reset allowing new test results to be uploaded immediately for the site in question.

@hategan hategan added the enhancement New feature or request label Apr 2, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant