0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-06 13:08:40 +08:00
discourse/lib/validators
Keegan George f4bd916c88
FEATURE: Log in with a one-time email code (#40804)
Previously, the only passwordless way to log in by email was a one-click
magic link, enabled with `enable_local_logins_via_email`.

This change adds `enable_local_logins_via_code`, which switches that
flow to send a short one-time code instead of a link: when enabled, the
login page offers "Email me a one-time login code" in place of the link
option, and entering the emailed code logs the user in (including
through any configured second factor). A code only ever logs an
*existing* user in, and the request endpoint responds identically
whether or not the email matches an account, so it can't be used to
probe for accounts.

Signing up with a one-time code builds on this and is in #40909.

<details>
<summary>Screenshots</summary>

**Desktop**

| Step | Foundation · Light | Foundation · Dark | Horizon · Light |
Horizon · Dark |
|---|---|---|---|---|
| Password form (default) | <img width="1400" height="1200"
alt="desktop-foundation-light-code-login-password-form"
src="https://github.com/user-attachments/assets/aa6758f0-9402-4229-8ad8-962d9773b7bd"
/> | <img width="1400" height="1200"
alt="desktop-foundation-dark-code-login-password-form"
src="https://github.com/user-attachments/assets/e4283e80-5973-48ba-8b24-e4a154fd04ea"
/> | <img width="1400" height="1200"
alt="desktop-horizon-light-code-login-password-form"
src="https://github.com/user-attachments/assets/8b58915c-f040-40cf-aa28-50e763032ba1"
/> | <img width="1400" height="1200"
alt="desktop-horizon-dark-code-login-password-form"
src="https://github.com/user-attachments/assets/4de1c283-1021-4ac1-b4e1-9e5e14a1a883"
/> |
| Email entry | <img width="1400" height="1200"
alt="desktop-foundation-light-code-login-email-step"
src="https://github.com/user-attachments/assets/9ecd42cd-b7a4-4eaa-b7a4-f3de2418d7df"
/> | <img width="1400" height="1200"
alt="desktop-foundation-dark-code-login-email-step"
src="https://github.com/user-attachments/assets/6e2d106c-6fdd-498b-a470-85b5dafab2c7"
/> | <img width="1400" height="1200"
alt="desktop-horizon-light-code-login-email-step"
src="https://github.com/user-attachments/assets/adfc7f9b-2651-43e1-a2ab-b37d1ff3e34f"
/> | <img width="1400" height="1200"
alt="desktop-horizon-dark-code-login-email-step"
src="https://github.com/user-attachments/assets/4e6872e1-ce77-462d-a04f-2c81fa5e61ed"
/> |
| Code entry | <img width="1400" height="1200"
alt="desktop-foundation-light-code-login-code-step"
src="https://github.com/user-attachments/assets/b9b53768-e095-489a-bb62-d23e8b018d28"
/> | <img width="1400" height="1200"
alt="desktop-foundation-dark-code-login-code-step"
src="https://github.com/user-attachments/assets/933e41fb-ea1b-434e-87b7-ffca6d651628"
/> | <img width="1400" height="1200"
alt="desktop-horizon-light-code-login-code-step"
src="https://github.com/user-attachments/assets/936967cf-b657-4d9f-80e2-c44226b681c3"
/> | <img width="1400" height="1200"
alt="desktop-horizon-dark-code-login-code-step"
src="https://github.com/user-attachments/assets/2bf4530c-e6ba-4561-963e-36a494288c3c"
/> |
| Invalid code | <img width="1400" height="1200"
alt="desktop-foundation-light-code-login-wrong-code"
src="https://github.com/user-attachments/assets/ddaf1ae4-66ec-499b-859c-c169ce544f3d"
/> | <img width="1400" height="1200"
alt="desktop-foundation-dark-code-login-wrong-code"
src="https://github.com/user-attachments/assets/f6a57236-f498-4a98-ac80-aee3f7a1e1a5"
/> | <img width="1400" height="1200"
alt="desktop-horizon-light-code-login-wrong-code"
src="https://github.com/user-attachments/assets/e8622433-d693-4faf-b2aa-f71c910c3b52"
/> | <img width="1400" height="1200"
alt="desktop-horizon-dark-code-login-wrong-code"
src="https://github.com/user-attachments/assets/0221c9ba-5003-4160-9ef9-281045f2f318"
/> |

**Mobile**

| Step | Foundation · Light | Foundation · Dark | Horizon · Light |
Horizon · Dark |
|---|---|---|---|---|
| Password form (default) | <img width="1170" height="3600"
alt="mobile-foundation-light-code-login-password-form"
src="https://github.com/user-attachments/assets/6e25f7b4-915f-4f55-8b27-9f51ec4ec1ea"
/> | <img width="1170" height="3600"
alt="mobile-foundation-dark-code-login-password-form"
src="https://github.com/user-attachments/assets/0e1b0009-8b70-454f-8167-01c7a8ce0664"
/> | <img width="1170" height="3600"
alt="mobile-horizon-light-code-login-password-form"
src="https://github.com/user-attachments/assets/79949635-a8f5-4fc5-aa2f-22edb77f7b2d"
/> | <img width="1170" height="3600"
alt="mobile-horizon-dark-code-login-password-form"
src="https://github.com/user-attachments/assets/1f7e962d-5e0b-4e22-bb54-0b27b870696f"
/> |
| Email entry | <img width="1170" height="3600"
alt="mobile-foundation-light-code-login-email-step"
src="https://github.com/user-attachments/assets/5577aad2-dd30-4424-af7a-af5f33458c8c"
/> | <img width="1170" height="3600"
alt="mobile-foundation-dark-code-login-email-step"
src="https://github.com/user-attachments/assets/571b5bf2-0b07-46ec-ba3a-b80bc1078643"
/> | <img width="1170" height="3600"
alt="mobile-horizon-light-code-login-email-step"
src="https://github.com/user-attachments/assets/3beb6702-e7df-434b-98d6-23203c6bee98"
/> | <img width="1170" height="3600"
alt="mobile-horizon-dark-code-login-email-step"
src="https://github.com/user-attachments/assets/17b33dc8-c133-4f07-8817-1f1f7c6cf8ff"
/> |
| Code entry | <img width="1170" height="3600"
alt="mobile-foundation-light-code-login-code-step"
src="https://github.com/user-attachments/assets/91beeec5-87eb-4169-a53d-53164dd7dd2a"
/> | <img width="1170" height="3600"
alt="mobile-foundation-dark-code-login-code-step"
src="https://github.com/user-attachments/assets/8d8de095-7050-4006-bc72-6a82f7c17513"
/> | <img width="1170" height="3600"
alt="mobile-horizon-light-code-login-code-step"
src="https://github.com/user-attachments/assets/f874a1c6-2e9f-4c0c-b500-850c44067489"
/> | <img width="1170" height="3600"
alt="mobile-horizon-dark-code-login-code-step"
src="https://github.com/user-attachments/assets/4957797c-00e9-45b8-8504-8baba15cde06"
/> |
| Invalid code | <img width="1170" height="3600"
alt="mobile-foundation-light-code-login-wrong-code"
src="https://github.com/user-attachments/assets/76124aa6-fd77-467a-b1bb-60e85e354612"
/> | <img width="1170" height="3600"
alt="mobile-foundation-dark-code-login-wrong-code"
src="https://github.com/user-attachments/assets/c0f8d7db-9a7e-4803-928c-91a504bf8391"
/> | <img width="1170" height="3600"
alt="mobile-horizon-light-code-login-wrong-code"
src="https://github.com/user-attachments/assets/77b97702-8ee7-4244-906e-6fddb5e22cae"
/> | <img width="1170" height="3600"
alt="mobile-horizon-dark-code-login-wrong-code"
src="https://github.com/user-attachments/assets/e034b400-6430-4441-9b2a-c0f1b0bb49c6"
/> |
</details>
2026-06-17 12:34:48 -07:00
..
allow_user_locale_enabled_validator.rb
allowed_iframes_validator.rb DEV: Replace Ruby numbered parameters by it where applicable (#37810) 2026-02-13 13:59:07 +01:00
allowed_ip_address_validator.rb
alternative_reply_by_email_addresses_validator.rb
at_least_one_group_validator.rb
categories_topics_validator.rb
category_search_priority_weights_validator.rb
censored_words_validator.rb
color_list_validator.rb
content_localization_locales_validator.rb FEATURE: Add a hidden setting to limit number of content localization locales (#33378) 2025-06-30 15:29:58 +08:00
csp_script_src_validator.rb DEV: Replace Ruby numbered parameters by it where applicable (#37810) 2026-02-13 13:59:07 +01:00
css_color_validator.rb
css_color_with_blank_validator.rb UX: add welcome banner text color setting (#34657) 2025-09-24 15:19:40 +08:00
datetime_setting_validator.rb DEV: Add datetime type for site settings / object settings (#36849) 2025-12-30 10:52:30 -06:00
default_composer_category_validator.rb
delete_rejected_email_after_days_validator.rb
email_address_validator.rb FIX: Validate email length (#34786) 2025-09-11 18:58:07 +03:00
email_setting_validator.rb
email_validator.rb
enable_discourse_id_validator.rb FEATURE: log errors when enabling discourse id (#36110) 2025-11-25 11:20:32 +01:00
enable_local_logins_via_code_validator.rb FEATURE: Log in with a one-time email code (#40804) 2026-06-17 12:34:48 -07:00
enable_local_logins_via_email_validator.rb
enable_private_email_messages_validator.rb
enable_sso_validator.rb FIX: Reject DiscourseConnect SSO payloads when secret is blank (#40830) 2026-06-12 15:17:16 +03:00
external_system_avatars_validator.rb
form_template_yaml_validator.rb DEV: Enable Style/RedundantBegin rubocop rule (#40096) 2026-05-19 18:44:54 +02:00
google_oauth2_hd_groups_validator.rb
group_setting_validator.rb DEV: add type:group (#40981) 2026-06-17 15:07:37 +02:00
host_list_setting_validator.rb
integer_setting_validator.rb DEV: Enable Style/RedundantParentheses rubocop rule (#40095) 2026-05-19 15:48:09 +02:00
ip_address_format_validator.rb
language_switcher_setting_validator.rb FEATURE: Also allow language switcher to be shown when users are logged in (#34578) 2025-08-27 23:01:07 +08:00
linkedin_oidc_credentials_validator.rb
markdown_linkify_tlds_validator.rb
markdown_typographer_quotation_marks_validator.rb
max_emojis_validator.rb
max_username_length_validator.rb
mediaconvert_output_subdirectory_validator.rb DEV: Update mediaconvert to use a subdirectory for output (#36049) 2025-11-20 14:03:14 -07:00
min_username_length_validator.rb
not_username_validator.rb
objects_setting_validator.rb FIX: Fix ObjectsSettingValidator error message handling (#38336) 2026-03-09 14:50:17 -03:00
password_validator.rb
pop3_polling_enabled_setting_validator.rb DEV: Fix assigned but unused variable Prism warnings (#39436) 2026-04-22 12:42:14 +02:00
post_validator.rb FIX: Cap the number of [quote] tags allowed per post (#40281) 2026-05-26 10:33:21 -03:00
quality_title_validator.rb
regex_presence_validator.rb
regex_setting_validation.rb
regex_setting_validator.rb
regexp_list_validator.rb DEV: Enable Style/RedundantBegin rubocop rule (#40096) 2026-05-19 18:44:54 +02:00
reply_by_email_address_validator.rb
reply_by_email_enabled_validator.rb
search_ranking_weights_validator.rb
search_tokenize_chinese_validator.rb
search_tokenize_japanese_validator.rb
selectable_avatars_mode_validator.rb
sso_overrides_email_validator.rb
string_setting_validator.rb DEV: Enable Style/RedundantParentheses rubocop rule (#40095) 2026-05-19 15:48:09 +02:00
stripped_length_validator.rb SECURITY: Respect max length in bot-human PMs 2025-06-09 12:04:11 +08:00
timezone_validator.rb
top_menu_validator.rb FEATURE: Add upcoming change for unified new view (#40631) 2026-06-09 11:34:22 +10:00
topic_setting_validator.rb FEATURE: Add new configurable moderation guide (#36287) 2025-12-01 10:30:32 +08:00
topic_title_length_validator.rb
unicode_username_allowlist_validator.rb
unicode_username_validator.rb DEV: Deprecate external_system_avatars_enabled (#33436) 2025-07-04 16:02:04 +08:00
unique_among_validator.rb DEV: Hand-pick Rails/WhereNot autofixes (#35117) 2025-10-03 13:29:22 +02:00
upload_setting_validator.rb DEV: clean up splash SVG on upload, not when rendering (#37681) 2026-02-16 13:14:35 +10:00
upload_validator.rb DEV: Enable Style/RedundantParentheses rubocop rule (#40095) 2026-05-19 15:48:09 +02:00
url_validator.rb
user_full_name_validator.rb
user_password_validator.rb
username_setting_validator.rb
video_conversion_enabled_validator.rb FEATURE: Add support for aws MediaConvert (#33092) 2025-07-23 11:58:33 -06:00
watched_words_validator.rb