Utiliser un code d'invitation pour contourner l'approbation des nouveaux utilisateurs ?

currently users can invite others by adding their email directly in the invitation box.

it would be great and much simpler if one can use a simple invitation-name (e.g. the username of invitee) to join the forum. since this way people can even use the invitation credit out of the web (in real events e.g.).

imagine I’ve attended a workshop where I find lot’s of people related to our discussion forum, and I’d like to invite them. I need to get lot’s of emails and after the workshop I need to invite them one by one.

but this way I can easily give them my username and ask them to join the forum adding this name in the invitee field, so that they can start from a higher level.

what’s your idea?

3 « J'aime »

You can also invite users by sharing the link in this dialog, have you tried that?

3 « J'aime »

how will you do that if you don’t have my email?

steps are:

  1. you ask for my email,
  2. I pass it to you,
  3. you start the app,
  4. invite me using one of the invite buttons,
  5. I proceed with the sign up process.

while there can be less steps:

  1. you give me a name (Stephan),
  2. I start the app,
  3. I go to the signup panel and add your name there,

of course the second process is what happens most of the time, and only the link between people and the credit is missed.

So what’s the benefit of adding a username at signup? If the user is able to find the community and register, what do they gain by populating that extra field? Are you just looking to collect a list of people you’ve referred in? What’s the benefit to them?

Invites typically serve the following purposes:

  1. Bring a person to your community and direct them to a specific topic - just entering your username wouldn’t achieve that
  2. Bring a person to your private community and grant them access - this would defeat the security of private communities
  3. Bring a person to your public community and automatically add them to a group to see other things - see (2)

In those cases they receive an email that once they click the link gives them a frictionless sign-in, the email address is already verified so they either use the suggested username, or pick their own, then move on.

You significantly oversimplified what will be required of users in your example, they’re going to need to remember lots of additional information and complete several additional steps:

  • Where to browse
  • What to look for when they get there
  • Who referred them

Then they’ll need to manually register and validate their email address. If there are any groups or privacy involved there’s also additional administration steps on top.

They don’t just “start the app” - there is no app which magically routes users to particular discourse instances based on referrer username, usernames aren’t unique between instances. Adding an app at this stage just complicates matters - if it’s a site-specific app they’ll need to also know what it’s called and install it, if it isn’t and you’re just referring to the Discourse Hub they will still need to install that and provide a URL.

That doesn’t sound particularly user-friendly.

With the invite link you avoid a couple of those pain-points, the where, what and who is contained. If you don’t like the length and complexity of that URL and plan to re-use a single invite there are a ton of URL shortening options out there. I’ve done this a number of times myself, putting links in presentation decks, on hand-outs and other materials.

The above suggests you’ve not thought this through at all. Consider the benefits to the other party and how realistic it really is.

3 « J'aime »

the benefit would be for them as well as invitee: some credit which results in their trust level (i.e. gamification).

this can only be meaningful if one can use his trust level somehow (to have extra access in the forum).

:+1: this is great, and can happen in the new scenario as well: once you give your invitation-name to me, if I use it in the sign up box, then I can skip the email verification step; because of your credit.

But that’s not verification, forum usernames are public. It will take seconds for spambots to realise that they can bypass the email verification field were that ever implemented.

Do you understand why email addresses need to be verified? If mail carriers such as Mailgun see many email bounces or receive spam reports for messages they will terminate the mail accounts of communities, cutting off email entirely. All because you don’t want to send or share an invite URL.

3 « J'aime »

the invitation-key doesn’t need to be the username, it was just an example!

it can be a simple name which is unique per user.

you may have internet access all the time and you may know the email for all of your real world friends/colleague, not applicable to everywhere in the world.

So now it’s a fourth thing they need to remember?

You’re making remembering invite URLs sound easy in comparison :grin:

you can think of some variation of the invitee email which would be hard for spam-bots to guess. e.g. if your email is stephan.tester@gmail.com, then the invite code can be simply stephan.tester123!

everyone know their own email. don’t they?

Creating unique codes per-invite would require you to have internet access, no? If not then it’s something you can brute force.

It wouldn’t bypass the need to verify email, there is no substitute to sending an email to a mailbox and having the recipient follow a link or enter a received code, that’s why it’s still done everywhere.

a unique code per user name is enough, not per invite.

yes, I can see the problem with the verification email. the main idea was about being able to gamify the invites and use the credit, bypassing the email was just a suggestion coming up from the fruitful discussion, which is really not applicable.

I think what is misleading is the term “invite”.

All accounts need a username and a valid email address. Typically a member supplies these when they register.

It sounds like what you have in mind is more like a “pre-registration” where you supply the username and email address and they follow a link to activate the account.

I guess this could be done but I don’t know how things could be worked out to give you “invite” credit.

Isn’t this possible with bulk invites plugin @techAPJ?

4 « J'aime »

Yes, that is correct.

@Pad_Pors I think this is closest to what you are looking for?

Using the above plugin you can simple hand out invite tokens to the people without needing to invite them manually.

5 « J'aime »

cool thanks :+1: , just to understand it clearly: using the plugin:

  • admins can create several invitation-keys for users.
  • each key works for a particular email.

is it working like that?

though not necessary, I think one can think on a simpler routine where trusted-users can invite others and get the credit.

I agree with @Stephen that the invitation buttons are great, but at least in our community (which is still young) people prefer to use word of mouth rather than a button!

hey! there is a community here you will enjoy being part of!

now imagine this dialogue:

hey! there is a community here you will enjoy being part of. if you come, tell Samuel has introduced me! this way you’ll be trusted simpler from the beginning.

Yes, admin can create (generate) several invitation-keys (invite tokens).

No invite tokens are not linked/restricted to an email. While redeeming/accepting the invitation user has ability to provide email and choose username.

4 « J'aime »

I followed the plugin discussion, and seems to me the plugin is not doing much in the favor of a simpler invitation process to be used in conference cases:

What this particular use case is reusable invites perhaps with a limited time frame. Then you could flash your url on a slide and people could copy it and do what you want.

The other solution is to allow users to request accounts, but that won’t give users credit for the invites.

OMG @codinghorror, j’ai vraiment besoin de ça aujourd’hui.

Je dois inviter 50 personnes sur un forum, je n’ai pas leurs adresses e-mail, je veux juste partager un code dans un groupe WhatsApp pour qu’elles s’inscrivent toutes.

Pour l’instant, il n’existe absolument aucun moyen propre de faire cela. Comme c’est assez urgent pour moi, je vais bricoler quelque chose de rudimentaire aujourd’hui.

Voici ce que je pense :

requires_approval : true
auto_approve_code : par défaut vide, si une valeur est définie, l’utilisateur est invité à saisir un code d’approbation lors de l’inscription ; s’il correspond, l’utilisateur est automatiquement approuvé.

Cela me permet de partager le code d’approbation 12345abc sur le forum dans mon groupe WhatsApp, et les gens pourront le partager au sein du cercle. Une fois le forum suffisamment peuplé, on pourra passer à un mode plus sécurisé et contrôlé.

Pour moi, il ne s’agit pas de reconnaissance, mais surtout de pouvoir semer de manière semi-sécurisée un forum avec beaucoup d’utilisateurs rapidement depuis un autre canal.

10 « J'aime »

Donc, il s’agit de sites sur invitation uniquement / tous les utilisateurs doivent être approuvés par l’équipe ? Si c’est le cas, le titre de ce sujet est très incorrect, laissez-moi le corriger maintenant.

Je n’ai aucune objection à cela en ce qui concerne le contournement des invitations ou des approbations.

5 « J'aime »