Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow admin can disable the default log in form #565

Closed
fame-odoo opened this issue Oct 11, 2023 · 3 comments
Closed

Allow admin can disable the default log in form #565

fame-odoo opened this issue Oct 11, 2023 · 3 comments
Assignees
Labels
enhancement Enhancement request
Milestone

Comments

@fame-odoo
Copy link

Is your feature request related to a problem? Please describe.
Hello there, I have been self-hosting answer.dev for a while and in order to enhance the security I am thinking of to disable the default log in form, only use the oauth log in.

Describe the solution you'd like
I would like a toggle option in settings page for the admin that we can disable the default log in form.

Describe alternatives you've considered
n/a

@fame-odoo fame-odoo added the enhancement Enhancement request label Oct 11, 2023
@fenbox
Copy link
Member

fenbox commented Oct 12, 2023

Thank you for your advice.

Disable password login is a dangerous option, and we also need to consider the option of recovery when it is closed by mistake.

@fenbox fenbox self-assigned this Oct 12, 2023
@fenbox fenbox added this to the v1.2.1 milestone Oct 18, 2023
@jihuayu
Copy link
Member

jihuayu commented Oct 22, 2023

We can consider not disabling the password login functionality for administrators. Or we can choose not to disable password login for specific IP addresses, such as "localhost".

@ignatz
Copy link

ignatz commented Dec 10, 2023

+1 to the request.

Just to add to the list of options: relegate the default password login to an additional/alternative non-public path.

@fenbox fenbox closed this as completed Dec 14, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement Enhancement request
Projects
Archived in project
Development

No branches or pull requests

6 participants