nedbat
2019 年9 月 25 日 15:31
1
On my site (https://discuss.openedx.org ), I don’t see Associated Accounts when I go to edit my profile, like I do when I edit my profile here. But I can’t see anything in settings or plugins that looks like something I have to enable. What am I missing?
Falco
2019 年9 月 28 日 12:51
3
It’s suppressed when 2FA is enabled.
nedbat
2019 年9 月 28 日 14:18
4
Maybe the problem here is I’m misunderstanding what they are for. I wanted a way for people to add their Twitter and GitHub accounts so that other users could see them. For example, to follow people they meet in the forum.
But it’s becoming clearer that the fields I see in my profile here are really only for authentication, and so are not displayed to others. In fact, in the admin panels, they are treated with the same secrecy as email address, with an explicit button to view.
If I want publicly visible Twitter and GitHub handles, do I have to add them as custom user fields myself?
Traditionally that is done in the About Me field as free text, so yes.
Falco
2019 年9 月 29 日 03:20
6
虽然这是一个对旧帖的回复，但这与当前情况高度相关，并且在 Google 搜索结果中名列前茅：
是否有 2020 年的解决方案？目前，现有论坛用户若通过 Patreon 捐赠，将无法获得任何 Discourse 奖励 。这是一个相当严重的问题，因为双因素认证（2FA）至关重要且日益普及（理应如此）。我们并不希望用户因为启用 2FA 而实际上受到“惩罚”。
我们难道不能要求用户在关联任何账户之前先确认 2FA 吗？直接完全移除该功能似乎有些离谱。例如，我在 Discord 上也启用了 2FA——难道启用后我就无法再关联任何账户了吗？
Falco
2020 年4 月 13 日 16:02
8
Patreon 插件无需社交登录即可正常工作。只要邮箱匹配，本地登录也能同样顺利，且邮箱会被正确分配到相应的群组。
哦……我们能把这个加到 Patreon OP 里吗？这挺重要的。我一直搞不懂为什么这个人无法建立链接，也不知道该找谁求助。这或许能帮到其他人~
不过，关联账户链接功能仍然非常实用——甚至有人会说它是必需的 。我相信并非所有人都会用同一个邮箱处理所有事情（我就没有），原因各有不同。有些人可能还会使用别名（例如 me+someAlias@gmail.com）：
能否在启用双重认证（2FA）的情况下仍然支持关联账户链接？ 考虑到 2FA 的重要性，这感觉像是一个很大的功能倒退；如果启用 2FA 会导致功能缺失，那实在不太能鼓励用户开启它。
@dylanh724 ，我的情况正是如此。我不仅使用 RFC 5233 定义的子地址，还针对每个服务使用不同的本地部分（尽管子域名相同）：
opened 04:40PM - 22 Jul 23 UTC
enhancement
0. Needs triage
### Is your feature request related to a problem? Please describe.
I utilise an… obfuscator for all of my e-mail addresses. [^1] Because it offers infinite aliases, I use a different alias *every* time I give my e-mail address to someone. However, I ensure that they're all under the `@rokejulianlockhart.addy.io` domain, so that they can be identified as me by a human. However, this isn't good enough. I use different aliases to combat spam, not be anonymous.
[^1]: [`github.com/anonaddy/anonaddy`](https://github.com/anonaddy/anonaddy/blob/16933763d0c37c97068fe05b2e7e9e57ca4d860c/README.md#what-is-a-standard-alias)
Additionally, when messaging others, I ensure that I add a sub-address with my name to their e-mail address so that they can filter all messages from me (even if I'm using a different alias for my own filtering purposes). Others use the same when communicating with me, especially family. The current identification system doesn't take sub addresses into account whatsoever.
### Describe the solution you'd like
I should therefore be able to set `RY7I0I+RY7I0R@rokejulianlockhart.addy.io` as an e-mail address, and beneath it add, for instance, the undermentioned:
```regex
[A-Za-z0-9]+\+[A-Za-z0-9]+@RokeJulianLockhart\.Addy\.IO
```
…in another input form to ensure that Nextcloud identifies any (in this case sub-addressed) alias as me.
### Describe alternatives you've considered
The sole current alternative is to list literal tens of thousands of aliases as myself, which is insane. It also wouldn't work, because the service generates a new alias when someone else uses one, so I'd have to retroactively add those whenever someone else uses one. It also wouldn't account for sub-addresses.
### Additional context
Like most more powerful features of Nextcloud, this only *need* be visible when clicked on. Adding a button beside each e-mail address to show a form which allows the user to enter custom regex is enough.
Additionally requested at:
1. [x] [`feedbackportal.microsoft.com/feedback/idea/ed4261f8-af28-ee11-a81c-6045bd8534ad`](https://feedbackportal.microsoft.com/feedback/idea/ed4261f8-af28-ee11-a81c-6045bd8534ad#:~:text=Allow%20specifying%20regex%20to%20match%20an%20e%2Dmail%20address%20to%20a%20contact.)
1. [x] [`discussions.apple.com/thread/255016441`](https://discussions.apple.com/thread/255016441?sortBy=rank#:~:text=Allow%20specifying%20regex%20to%20match,%20%20%20%20https://developer.apple.com/forums/thread/734290.)
1. [x] [`developer.apple.com/forums/thread/734290`](https://developer.apple.com/forums/thread/734290?answerId=801868022#801868022:~:text=Is%20your%20feature%20request%20related,%20%20%20%20https://github.com/nextcloud/contacts/issues/3530%23issue%2D1816825315.)
1. [x] [`bugzilla.mozilla.org/show_bug.cgi?id=1845009#c0`](https://bugzilla.mozilla.org/show_bug.cgi?id=1845009#c0:~:text=User%20Agent:%20Mozilla/5.0%20(X11;%20Linux,case%20sub%2Daddressed)%20alias%20as%20me.)
因此，我想说明以下内容是毫无意义的：
我已启用 2FA。目前通过 TOTP 实现，但待以下问题解决后，将改用 CTAP1：
Feature Requests
Password Manager
Use case: As a user of a website with multiple Top Level Domains (TLD), I want to be able to store multiple passkeys for one Vault Entry. Reason: Passkeys are made so that they are usable only for one relying party ID to avoid phishing attacks...
Reading time: 16 mins 🕑
Likes: 33 ❤
这仅用于用户名加密码的登录。此外，我还为该账户启用了 CTAP2 单因素认证（1FA）。该功能也适用于所有可能的 OAuth 替代方案，这使得阻止连接替代单点登录（SSO）选项的理由显得相当过时。
在此期间，这多次令我感到困惑：