NuGetGallery icon indicating copy to clipboard operation
NuGetGallery copied to clipboard

[Feature]: Support renaming users and organizations on NuGet.org

Open joelverhagen opened this issue 3 years ago • 7 comments

Related Problem

We've received several support requests on NuGet.org over the years to change a user account or organization username. This is not currently supported with either a tool available to users or to site admins.

The workaround is:

  1. Create a new account with the desired username.
  2. Add the new account as an owner on packages the old account owns.
  3. Accept ownership in the new account and remove the old account from ownership.
  4. Optionally, delete the old account.

This is workable in most cases but has some problems:

  • It's very painful if the number of accounts is high.
  • Other entities like ID prefix reservations or organization memberships are not transferred
  • API keys are reset
  • You need a second MSA or AAD account for the transition process

The Elevator Pitch

We should provide a tool that allows either users or site admins to perform this operation easily.

There are issues to consider with this feature:

  • Username changes break client trust policies that use username (https://docs.microsoft.com/en-us/nuget/consume-packages/installing-signed-packages#trust-package-owners)
  • The old username should be blocked from usage to prevent impersonation attacks
  • Could this be used by spammers or other malicious actors to avoid detection?
  • Should we allow as many renames as you want? Or should there be some throttling? If we block old usernames this tool could be used to easily eat up a lot of usernames.

Additional Context and Details

There is another related request of changing username casing: https://github.com/NuGet/NuGetGallery/issues/5013. This could perhaps be solved at the same time.

Past requests for a username change on our issue tracker are here:

  • https://github.com/NuGet/NuGetGallery/issues/4673
  • https://github.com/NuGet/NuGetGallery/issues/1838
  • https://github.com/NuGet/NuGetGallery/issues/319

joelverhagen avatar Aug 24 '22 15:08 joelverhagen

Hi Team, any update for this ?

chuongmep avatar Mar 20 '23 09:03 chuongmep

Hello @chuongmep, we've recently updated the policy around this. We're still working on updating our documentation to reflect this (cc @ryuyu). Could you email [email protected] about your username change?

joelverhagen avatar Mar 20 '23 13:03 joelverhagen

Was this closed on purpose? @mariaghiondea

sliekens avatar Oct 15 '23 01:10 sliekens

Hi @sliekens , after send email for team, my problem resolved.

chuongmep avatar Oct 15 '23 01:10 chuongmep

Sure, but I don't see a self-service page on the gallery so I'm curious if this issue for that was closed by accident.

sliekens avatar Oct 15 '23 02:10 sliekens

so, it is still not possible to change the owner name

Marusyk avatar Jun 27 '24 11:06 Marusyk

@sliekens - correct, there is no self service form today.

@Marusyk - it is possible via support request. Please see https://learn.microsoft.com/en-us/nuget/nuget-org/nuget-org-faq#how-do-i-change-my-nuget-org-account-username.

joelverhagen avatar Jul 15 '24 22:07 joelverhagen