Hi discourse, This question maybe asked, but I cannot find answer with keywords ‘admin-login’. My question is how can I disable user access for example, https://forums.example.com/u/admin-login?

Thank you all has replied the questions. My fault I thought the discourse has option to redirect the access of /u/admin-login to its homepage. It turns out it because I’m in logged-in state, in which users are redirected. Totally agreed /u/login is risky if admin-login is. :sweat_smile:

So why would you want to disable admin access?

:arrow_up: exactly that. If you ever get ‘locked out’ by read only mode or a misbehaving sso the admin login comes in quite handy :wink:

Initially I have set user@example.com as admin. Then I have basic_auth connected. So I want to myself login only through basic_auth. So do for end users. This is a risk exposure if use access https://forums.example.com/u/admin-login.

[תמונה] Hyan: This is a risk exposure if use access How so? Only forum admins can use that login.

If you want increased security you can add a 2nd factor. Are you also going to remove the forgot-password path? It has exactly the same security risk as the /u/login. You could disable /u/admin-login with a plugin, which in the past 10 years, no one has wanted to have developed.

[תמונה] Jay Pfaffman: add a 2nd factor. this is the way.

[תמונה] Jay Pfaffman: You could disable /u/admin-login with a plugin, which in the past 10 years, no one has wanted to have developed. If you are self-hosting, you could also block the route in nginx etc. Not recommended, but possible

[תמונה] Hyan: I thought the discourse has option to redirect the access of /u/admin-login to its homepage. It turns out it because I’m in logged-in state, in which users are redirected. HA! Yes. That can be confusing. It’s not a magic just-login-whoever-uses-that-url link!

בטל /u/admin-login

תמיכה

Bas (Bas van Leeuwen) 15 במרץ,‏ 2024,‏ 8:56am 8

If you are self-hosting, you could also block the route in nginx etc.

Not recommended, but possible

נושא		תגובות	צפיות
Log back in as admin after locking yourself out with read-only mode or an invalid SSO configuration Site Management how-to , read-only	5	5832	29 באוגוסט,‏ 2025
Locked myself out of Discourse Product Support	2	814	15 באוקטובר,‏ 2021
Limit login to staff only? Product Support	7	1213	27 באוגוסט,‏ 2023
How to log in my forum when the forum is in read-only mode? Product Support read-only	3	1796	28 בנובמבר,‏ 2022
Help with locking down forum Product Support	7	305	18 בספטמבר,‏ 2025

בטל /u/admin-login

נושאים קשורים