The Login Helper Plugin is a Discourse plugin designed to simplify the login process for novice users. It allows users to receive a login email when they click on a link in a notification email, without requiring further interaction. The plugin redirects the user to the previously linked topic after login.
The plugin’s current features include:
Enriching links in notification emails with the user’s email address
Sending a login email when a user follows one of these links
Redirecting the user to the previously linked topic after login
thoka, the plugin creator, discussed potential improvements with anon82911141. They considered creating automatic login links in email summaries, but this approach raises security concerns. thoka noted that educating users about security risks may not be effective.
Instead, anon82911141 suggested adding a warning message to inform users about potential security risks associated with sharing links. thoka agreed that this might work for specific communities, but other links in the message should not be direct login links.
anon82911141 acknowledged the potential limitations of this feature, but appreciated the plugin’s usefulness and suggested it could be particularly valuable for certain communities, such as the elderly or those vulnerable to attacks.
Would it not be easier to simply create log-in redirect links in email summaries which automatically login users and re-direct them to a topic so that any email received which contains a link allows for them to log in using that link? There would be a lot less emails being sent and users wouldn’t have to go back checking for another email.
Step-by-step:
User is mentioned in Topic A
(User is not logged in on their browser)
User receives email notification about Topic A
User clicks Topic A email notification and is automatically logged in and re-directed to Topic A
Yes, this seems much easier for the user.
Unfortunately, you would have to educate users that they allow free logins to their accounts by sharing links.
Security by education does not work.
The way it works now, you learn about login attempts and have to authenticate them by using the special email sent to your account.
I guess you’re right - however, it seems quite obvious people don’t share links directly from their email inbox. Perhaps something like a warning message may help?
I guess you’re right - it would be a niche feature for not a lot of communities, perhaps for the elderly or for those not vulnerable to attacks. Nevertheless, would be a nice feature to have. Regardless - great plugin and will definitely be checking it out!
