Is it Possible to Send Encrypted Email and Password in the Authentication Flow?

Dev
1

Hi all,

I’m exploring a use case where we would need to send encrypted email addresses and passwords as part of the authentication flow in Discourse. Before proceeding further, I wanted to check if this functionality is possible within Discourse.

Specifically, we need to ensure that the email and password are encrypted during transmission, both for security and compliance reasons. Has anyone worked on or encountered a similar scenario? Are there any built-in features or recommended approaches for handling this securely within the Discourse authentication flow?

Looking forward to your insights!

Thanks in advance!

2

I think if you just follow Use Discourse as an identity provider (SSO, DiscourseConnect) or Setup DiscourseConnect - Official Single-Sign-On for Discourse (sso) then everything is encrypted between the server and client.

If you don’t want discourse to know the email actual email addresses, things will be harder.