I’m an admin on a by invitation support forum and am looking for a way to force users to reverify their email every 90 days. This is to help remove users access if they have left the company that they originally signed up with.
1 Like
You could try this plugin:
2 Likes
Unfortunately I’m ‘hosted by Discourse’, so plugin use is limited.
I’m looking into an API access right now.
1 Like
it’s been a while but this is an interesting use case you are describing. Did you eventually find a solution that you can share here?
No, It is still on our list of things that we would like to implement but it has been pushed to a back burner.
1 Like
yes, i have a repository that might be of intrest to you, but i must admit this is also on my back burner
If you want to Fork, then feel free, i welcome any PRs
I went ahead and slipped this topic across to Feature because forcing members to reverify their email address on a schedule is not a feature that exists in Discourse currently. If there is more demand for it, then perhaps it could be added.
One solution might be an admin setting to always require email verification when logging in locally. I’ve seen this myself recently. Just yesterday my wife set up a family subscription to a newspaper we all read, and I was no longer able to log in using her account because it sent her an email verification link.
External solutions could also work, e.g. by using SSO using a tool that does provide this, and disabling local login. That would take some research to see if one exists!
Beyond that, yes, the best approach would be to use the API. If you try Ethan’s and it works for you, let us know! Would be cool actually to see folks sharing scripts for API use, here on meta. If you want to work on this, please start a new topic in Dev.
This seems like a good potential feature have voted for this.