Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🚀 Feature: allowable emails for signup OR emails that aren't allowed #4883

Open
2 tasks done
DankMemeGuy opened this issue Dec 19, 2022 · 1 comment
Open
2 tasks done
Labels
product / auth Fixes and upgrades for the Appwrite Auth / Users / Teams services.

Comments

@DankMemeGuy
Copy link

🔖 Feature description

Right now a user can sign-up using any email provider they want. This includes temporary email address companies such as disposable email providers, which enables the user to signup for countless accounts, thus potentially increasing abuse and spam on the platform.

The feature request is having the ability to (1) only allow certain domains to be used as the email provider, such as hotmail, gmail, etc. AND (2) having a deny list so email providers on the list would not be able to be used to signup, such as temporary email providers.

The reason I believe this should be hardcoded as a feature instead of as a hacky workaround for the developer is because of the usage people would have. Many developers would likely use such a feature, and the list would need to be regularly updated. This feature should be integrated as part of the email delivery configuration panel when setting up the STMP details.

🎤 Pitch

Websites that use a tiered membership model, with a base free plan, may experience more fake accounts so users wouldn't have to upgrade and just keep using the free plan indefinitely with new accounts. Social platforms may experience spam/abuse with fake accounts as users try bypassing bans/limits.

👀 Have you spent some time to check if this issue has been raised before?

  • I checked and didn't find similar issue

🏢 Have you read the Code of Conduct?

@stnguyen90 stnguyen90 self-assigned this Dec 21, 2022
@stnguyen90 stnguyen90 added the product / auth Fixes and upgrades for the Appwrite Auth / Users / Teams services. label Dec 21, 2022
@stnguyen90 stnguyen90 removed their assignment Dec 21, 2022
@stnguyen90
Copy link
Contributor

@DankMemeGuy, thanks for raising this! 🙏🏼

I know you wanted to avoid a workaround, but if anyone is looking to implement something like this right now, it could be done by:

  1. Setting the Users Limit to 1 (to prevent users from being able to create an account).
  2. Create an Appwrite Function that would validate the email and create an account using a server SDK (since this would bypass the Users Limit)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
product / auth Fixes and upgrades for the Appwrite Auth / Users / Teams services.
Projects
None yet
Development

No branches or pull requests

2 participants