ProjectLighthouse
ProjectLighthouse copied to clipboard
Automatic Account Creation
This is something we'll need to think about carefully when approaching a public beta.
- [x] User can create an account without needing an admin to do it for them
- [x] Verify account by email
- [x] Some sort of anti-bot safeguards. Recaptcha, limit total users per IP are some ideas I have but there may be better ways
- [ ] We need the user to enter their birthday. We don't have to verify if it's true or not, but this will help us be in compliance with COPPA.
- [ ] If user indicates they are below the age of 13, restrict their access (COPPA). We could also ask them to try again instead of locking them out of the system for a year or two by IP, since they could have entered the wrong date by mistake
Users can already create accounts by themselves, it's just that our private instance has registrations disabled.
For the date of birth thing, I would strongly prefer this be done client-side with JavaScript so we aren't handling the data.