Allow account recovery without access to an admin account
Maintainers usually reply within 2 days
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 35/100
- Issue type
- Feature
- Clarity
- Needs clarification
- Activity status
- Active
- Tech stack
- go
- Domain
- authentication, authorization, cli
Research direction
No files, tests, or entry points are named. Start by comparing the proposed CLI and username:passwordhash approaches, then inspect the existing account, password, and admin-permission flows to determine the recovery boundary. Done means one agreed, secure way to recover or recreate the last admin without an existing admin session.
Written by the indexing model from the issue text.
Description
It's possible that the only admin loses their password. Gotify should provide a way to recover the admin account, or create a new admin account.
Options
- CLI commands for changing the password, creating a new user, changing admin status on user
- Consume a username:passwordhash file, and then update the username:passwordhash pairs
I think we can ignore the possibility of losing the last admin due to OIDC login demoting a user. If permissions are handled by the IdP, then the admin should be able to configure the IdP to give a user admin permissions on next login.
- Dominant language
- Go
- Stars
- 16k
- Forks
- 891
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 6
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from gotify/server
-
a:bug
Difficulty 2/5 1-3 hours Newbie friendliness 80/100
gotify/server#1068 · 1 reaction ·
Maintainers usually reply within 2 days
-
Session elevation duration is unbounded, and large values silently overflow to a past timestampPossibly taken @piyush295 claimed this 14 days ago. Opena:bug
Difficulty 3/5 1-2 days Newbie friendliness 78/100
gotify/server#1051 · 2 comments ·
Maintainers usually reply within 2 days
-
a:bug
Difficulty 4/5 3-5 days Newbie friendliness 48/100
gotify/server#1047 · 6 comments ·
Maintainers usually reply within 2 days
-
a:feature
Difficulty 4/5 3-5 days Newbie friendliness 35/100
Maintainers usually reply within 2 days
-
a:feature
Difficulty 5/5 Over a week Newbie friendliness 30/100
Maintainers usually reply within 2 days
Similar issues
-
documentation
Difficulty 1/5 Under an hour Newbie friendliness 85/100
gravitational/teleport#69869 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 73/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 63/100
Maintainers usually reply within 1 day
-
Difficulty 1/5 Under an hour Newbie friendliness 85/100