Hi discourse, This question maybe asked, but I cannot find answer with keywords ‘admin-login’. My question is how can I disable user access for example, https://forums.example.com/u/admin-login?

Thank you all has replied the questions. My fault I thought the discourse has option to redirect the access of /u/admin-login to its homepage. It turns out it because I’m in logged-in state, in which users are redirected. Totally agreed /u/login is risky if admin-login is. :sweat_smile:

So why would you want to disable admin access?

:arrow_up: exactly that. If you ever get ‘locked out’ by read only mode or a misbehaving sso the admin login comes in quite handy :wink:

Initially I have set user@example.com as admin. Then I have basic_auth connected. So I want to myself login only through basic_auth. So do for end users. This is a risk exposure if use access https://forums.example.com/u/admin-login.

[image] Hyan: This is a risk exposure if use access How so? Only forum admins can use that login.

If you want increased security you can add a 2nd factor. Are you also going to remove the forgot-password path? It has exactly the same security risk as the /u/login. You could disable /u/admin-login with a plugin, which in the past 10 years, no one has wanted to have developed.

[image] Jay Pfaffman: add a 2nd factor. this is the way.

[image] Jay Pfaffman: You could disable /u/admin-login with a plugin, which in the past 10 years, no one has wanted to have developed. If you are self-hosting, you could also block the route in nginx etc. Not recommended, but possible

[image] Hyan: I thought the discourse has option to redirect the access of /u/admin-login to its homepage. It turns out it because I’m in logged-in state, in which users are redirected. HA! Yes. That can be confusing. It’s not a magic just-login-whoever-uses-that-url link!

Disable /u/admin-login

Product Support

pfaffman (Jay Pfaffman) March 20, 2024, 4:27pm 10

HA! Yes. That can be confusing. It’s not a magic just-login-whoever-uses-that-url link!

Topic		Replies	Views
Log back in as admin after locking yourself out with read-only mode or an invalid SSO configuration Site Management how-to , read-only	5	5830	August 29, 2025
Locked myself out of Discourse Product Support	2	814	October 15, 2021
Limit login to staff only? Product Support	7	1211	August 27, 2023
How to log in my forum when the forum is in read-only mode? Product Support read-only	3	1796	November 28, 2022
Help with locking down forum Product Support	7	301	September 18, 2025

Disable /u/admin-login

Related topics