Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FR] Improve first account creation #5247

Open
2 tasks done
matmair opened this issue Jul 13, 2023 · 7 comments
Open
2 tasks done

[FR] Improve first account creation #5247

matmair opened this issue Jul 13, 2023 · 7 comments
Assignees
Labels
enhancement This is an suggested enhancement or new feature Fund This issue can be specifically funded for development security Relates to a security issue setup Relates to the InvenTree setup / installation process
Milestone

Comments

@matmair
Copy link
Contributor

matmair commented Jul 13, 2023

Please verify that this feature request has NOT been suggested before.

  • I checked and didn't find a similar feature request

Problem statement

Currently you either get issued credentials for the first login (by the packaged installer) or need to run a command to get your intial admin account. This works but leaves the admin to either

  • login and change the password
  • cerate an account from the CLI without access to all the tools browsers have included (ie password generators)

Suggested solution

With django-sesame integrated in #5209 we can now issue links that log users in. This means we can add a task that creates an empty admin user account and a scoped login url that can be used by an admin to login in and register in 1 step. This could later be expanded to flow into #2284 creating an easy and secure setup experience.

Describe alternatives you've considered

We could change the current creation task to include a login link (with the created users credentials) but that is pretty insecure.

Examples of other systems

most self-hosted enterprise solutions provide a first-use token

Do you want to develop this?

  • I want to develop this.

Upvote & Fund

  • We're using Polar.sh so you can upvote and help fund this issue.
  • We receive the funding once the issue is completed & confirmed by you.
  • Thank you in advance for helping prioritize & fund our backlog.
Fund with Polar
@matmair matmair added enhancement This is an suggested enhancement or new feature setup Relates to the InvenTree setup / installation process labels Jul 13, 2023
@SchrodingersGat
Copy link
Member

Love this idea. Would make the oobe much nicer

@github-actions
Copy link
Contributor

This issue seems stale. Please react to show this is still important.

@github-actions github-actions bot added the inactive Indicates lack of activity label Sep 12, 2023
@matmair
Copy link
Contributor Author

matmair commented Sep 15, 2023

Still on ToDo list

@github-actions github-actions bot removed the inactive Indicates lack of activity label Sep 15, 2023
Copy link
Contributor

This issue seems stale. Please react to show this is still important.

@github-actions github-actions bot added the inactive Indicates lack of activity label Nov 14, 2023
@matmair
Copy link
Contributor Author

matmair commented Nov 14, 2023

Still relevant

@github-actions github-actions bot removed the inactive Indicates lack of activity label Nov 15, 2023
Copy link
Contributor

This issue seems stale. Please react to show this is still important.

@github-actions github-actions bot added the inactive Indicates lack of activity label Jan 15, 2024
@SchrodingersGat
Copy link
Member

not stale

@matmair matmair removed the inactive Indicates lack of activity label Jan 15, 2024
@matmair matmair self-assigned this Jan 15, 2024
@matmair matmair added the security Relates to a security issue label Jan 15, 2024
@matmair matmair added this to the horizon milestone Jan 15, 2024
@SchrodingersGat SchrodingersGat added the Fund This issue can be specifically funded for development label Jan 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement This is an suggested enhancement or new feature Fund This issue can be specifically funded for development security Relates to a security issue setup Relates to the InvenTree setup / installation process
Projects
None yet
Development

No branches or pull requests

2 participants