-
Notifications
You must be signed in to change notification settings - Fork 1.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Allow admin can disable the default log in form #565
Comments
Thank you for your advice. Disable password login is a dangerous option, and we also need to consider the option of recovery when it is closed by mistake. |
We can consider not disabling the password login functionality for administrators. Or we can choose not to disable password login for specific IP addresses, such as "localhost". |
+1 to the request. Just to add to the list of options: relegate the default password login to an additional/alternative non-public path. |
Is your feature request related to a problem? Please describe.
Hello there, I have been self-hosting answer.dev for a while and in order to enhance the security I am thinking of to disable the default log in form, only use the oauth log in.
Describe the solution you'd like
I would like a toggle option in settings page for the admin that we can disable the default log in form.
Describe alternatives you've considered
n/a
The text was updated successfully, but these errors were encountered: