🚀 Feature: Add a page showing info regarding Login Codes #190

Closed
opened 2025-07-08 08:41:56 -04:00 by AtHeartEngineer · 0 comments

Originally created by @gtensolr on 5/7/2025

Feature description

This feature would add a page on the GUI that show all of the Login Codes, with the ability of the admin to revoke a code or re-send it. In addition it would be nice to have filters such as Active/Expired, Used/Not Used, User who generated. In addition a built-in simple logic to deter brute force login would be nice, i.e. after 5 failed codes, the IP is banned for a couple of hours.

Pitch

Currently one of the only ways of Inviting a user to create an account on Pocket ID is to create a Login Code and mail to that person. After the code is created, there's no way for the admin to see active codes, if they were used or not and to revoke them, which can open an attack vector to the server. Having the ability to monitor Login Codes, especially when it's recognized that they offer lower level of security would be ideal.

*Originally created by @gtensolr on 5/7/2025* ### Feature description This feature would add a page on the GUI that show all of the Login Codes, with the ability of the admin to revoke a code or re-send it. In addition it would be nice to have filters such as Active/Expired, Used/Not Used, User who generated. In addition a built-in simple logic to deter brute force login would be nice, i.e. after 5 failed codes, the IP is banned for a couple of hours. ### Pitch Currently one of the only ways of Inviting a user to create an account on Pocket ID is to create a Login Code and mail to that person. After the code is created, there's no way for the admin to see active codes, if they were used or not and to revoke them, which can open an attack vector to the server. Having the ability to monitor Login Codes, especially when it's recognized that they offer lower level of security would be ideal.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github/pocket-id#190