Discourse-Anmeldung per Cookie-Token

This is insecure. A user could tamper with the cookie in their browser and log in as someone else.

You should use DiscourseConnect instead.

3 „Gefällt mir“