databag icon indicating copy to clipboard operation
databag copied to clipboard

Where to get token only for addNodeAccount?

Open ghost opened this issue 2 years ago • 8 comments

I guess, if it is possible to get a token for using this skope from put another script or the commandline.

I see, admin token is security hazzard. But in some way, it had to been created once.

The usecase is to create a first login link without activity by the admin him/her self.

ghost avatar Jul 26 '23 03:07 ghost

The server can be configured for public access, where an account can be created without a token. Would this achieve what you are looking for?

balzack avatar Jul 26 '23 05:07 balzack

Yes, it would for now. How does it work exactly?

But to put antispam and workflow integration together, it could be nice in the future to generate a first login link automaticly.

Pierre Balzack @.***> schrieb am Mi., 26. Juli 2023, 07:40:

The server can be configured for public access, where an account can be created without a token. Would this achieve what you are looking for?

— Reply to this email directly, view it on GitHub https://github.com/balzack/databag/issues/56#issuecomment-1651012279, or unsubscribe https://github.com/notifications/unsubscribe-auth/AK35VR35VAPZBXYQFUL42IDXSCUTHANCNFSM6AAAAAA2X6RCTM . You are receiving this because you authored the thread.Message ID: @.***>

ghost avatar Jul 26 '23 13:07 ghost

If you deploy the latest staging container 0.1.6, you can set the option "Public Account Creation" and a value for the "Limit" of accounts that can be created.

I plan to promote this container to latest in the next few days.

I agree, there is a need for anti-spam when public access is enabled.

balzack avatar Jul 26 '23 16:07 balzack

Thanks, I'll check it out.

Pierre Balzack @.***> schrieb am Mi., 26. Juli 2023, 18:49:

If you deploy the latest staging container 0.1.6, you can set the option "Public Account Creation" and a value for the "Limit" of accounts that can be created.

I plan to promote this container to latest in the next few days.

I agree, there is a need for anti-spam when public access is enabled.

— Reply to this email directly, view it on GitHub https://github.com/balzack/databag/issues/56#issuecomment-1652172871, or unsubscribe https://github.com/notifications/unsubscribe-auth/AK35VR3VI6XCKHHCCCKHOC3XSFDDBANCNFSM6AAAAAA2X6RCTM . You are receiving this because you authored the thread.Message ID: @.***>

ghost avatar Jul 27 '23 02:07 ghost

This works fine. But it is still a handy manipulation...

It ok for this time

indicavia @.***> schrieb am Do., 27. Juli 2023, 04:18:

Thanks, I'll check it out.

Pierre Balzack @.***> schrieb am Mi., 26. Juli 2023, 18:49:

If you deploy the latest staging container 0.1.6, you can set the option "Public Account Creation" and a value for the "Limit" of accounts that can be created.

I plan to promote this container to latest in the next few days.

I agree, there is a need for anti-spam when public access is enabled.

— Reply to this email directly, view it on GitHub https://github.com/balzack/databag/issues/56#issuecomment-1652172871, or unsubscribe https://github.com/notifications/unsubscribe-auth/AK35VR3VI6XCKHHCCCKHOC3XSFDDBANCNFSM6AAAAAA2X6RCTM . You are receiving this because you authored the thread.Message ID: @.***>

ghost avatar Aug 04 '23 05:08 ghost

Btw:

How is the databag-address to get news, e.g. about this case?

Mine is: @.***

indicavia @.***> schrieb am Fr., 4. Aug. 2023, 07:50:

This works fine. But it is still a handy manipulation...

It ok for this time

indicavia @.***> schrieb am Do., 27. Juli 2023, 04:18:

Thanks, I'll check it out.

Pierre Balzack @.***> schrieb am Mi., 26. Juli 2023, 18:49:

If you deploy the latest staging container 0.1.6, you can set the option "Public Account Creation" and a value for the "Limit" of accounts that can be created.

I plan to promote this container to latest in the next few days.

I agree, there is a need for anti-spam when public access is enabled.

— Reply to this email directly, view it on GitHub https://github.com/balzack/databag/issues/56#issuecomment-1652172871, or unsubscribe https://github.com/notifications/unsubscribe-auth/AK35VR3VI6XCKHHCCCKHOC3XSFDDBANCNFSM6AAAAAA2X6RCTM . You are receiving this because you authored the thread.Message ID: @.***>

ghost avatar Aug 09 '23 15:08 ghost

I don't think I understand. Are you asking how to get notified when anti-spam is added to the project?

balzack avatar Aug 09 '23 20:08 balzack

Usualy once offer an Account into the App Which is Designed for safe communication.

Example: @.***: The following is a message from the Conduit developers. It was sent on '2023-07-29':

Hello, Timo here, Thanks for updating your Conduit. Starting now, you will receive notifications in this room for important Conduit news, like when a new release comes out or a new security issue was discovered. This works by sending a simple GET request to conduit.rs once per hour. You can opt out of this by setting allow_check_for_updates = false in your config. Have a nice day!"

So news and Feedback are Tests same time...

Pierre Balzack @.***> schrieb am Mi., 9. Aug. 2023, 22:50:

I don't think I understand. Are you asking how to get notified when anti-spam is added to the project?

— Reply to this email directly, view it on GitHub https://github.com/balzack/databag/issues/56#issuecomment-1672130312, or unsubscribe https://github.com/notifications/unsubscribe-auth/AK35VR4GX7F43GPS6ZR5TDDXUPZ2VANCNFSM6AAAAAA2X6RCTM . You are receiving this because you authored the thread.Message ID: @.***>

ghost avatar Aug 31 '23 05:08 ghost