psiho
Add ability to login without registration
Add ability to login without registration because I wrote my email wrong. Now I can't sign in nor open email for registration. We should be able to login without email registration and change email for new registration code. Maybe logic could be like this: You can login without email registration but you can't publish, save, edit benchmark tests without registration?
For quick solution, please remove my account so I can create new one.
Hi @b8kkyn ,
your username is deleted so you can retry now with correct email address.
User management is managed by AWS Cognito. Like any other properly designed user management it requires some way of confirming your identity. In Cognito, it is either email or phone. Now, registering email in any way would be completely insecure without verifying it. Otherwise, for example, you could register (or open an unconfirmed account) with someone else's email. That would make it impossible for the real owner of the email to register and he would also get registration notifications without asking for it.
In my implementation, I did use "username" as an alias to email, which also makes it unique and required. I did it so I don't ever need to use or know anybody's email address (and we need something to display as the owner of the published test). Yes, those two things lead to situation that wrongly typed email also "reserves" original username indefinitely. Because duplicates are not allowed and the system waits for an email confirmation. It is a rare use case but I will think about this one. A similar use case to think about is the ability to change email addresses without opening a new account (and losing all your saved tests).
But your suggestion is not clear. "Ability to login without registering but disable publish, save, edit"? That's exactly the functionality you already have without registering. You need to register only if you want to keep your tests saved. But running any public test or writing your own (without saving) can be done without registering. Maybe your suggestion would be better described as "reserving username" where you would pick a username and password which would put your account in "unconfirmed" status until email (which would be editable) is confirmed? Unfortunately, I don't think Cognito supports this workflow, but as I mentioned above, I'll check how to better deal with wrong email address used during registration.
Well, I wanted to sign up so I could save the benchmark. But I stuck in the middle. Point is giving user a chance for change email address @psiho