Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

unregister / delete user #359

Open
mploigt opened this issue Oct 9, 2014 · 22 comments
Open

unregister / delete user #359

mploigt opened this issue Oct 9, 2014 · 22 comments

Comments

@mploigt
Copy link

mploigt commented Oct 9, 2014

I can't find a way to delete my user account. How can I do this?

@Martii
Copy link
Member

Martii commented Oct 10, 2014

Related to #233

As I stated there a potential spammers haven especially with fly by account grifters.

@mploigt
Copy link
Author

mploigt commented Oct 10, 2014

I'm sorry but I did not get what you want to say here. I'm just suggesting to add a function to unregister an account. Maybe mark all comments made with this account with "anonymous" in the progress.

@Martii
Copy link
Member

Martii commented Oct 10, 2014

Maybe mark all comments made with this account with "anonymous" in the progress.

Probably not. -1 here for this part.

I'm sorry but I did not get what you want to say here. I'm just suggesting to add a function to unregister an account.

And I responded clearly that you are asking to open the doors for spammers coming and and leaving constantly... especially with changing things to anonymous as you suggested. I'd be more open to the suggestion of permanent removal based off ones OAuth with no chance of recovery or any future access... although if one uses some common sense first by checking out a site before registration then there would be no need to have this feature request... but that's just me.

@TimidScript
Copy link

People can change their mind overtime and also I think one can tell the difference between spammers and legitimate requests. There should be a request form and the Admin should act accordingly.

Also what kinda of spammer creates an account and then deletes it? They usually create an account abuse it until it gets banned and then create another account. USO was a perfect example of that in action. Towards the end there was no need to create new account and the same accounts kept on spamming and filling the site with iffy scripts.

@Martii
Copy link
Member

Martii commented Oct 15, 2014

They usually create an account abuse it until it gets banned and then create another account. USO was a perfect example of that in action.

Actually it wasn't only this and I had some inside info. Point reiterated, in more generic terms, I believe we should have some sort of longer term consequence... e.g. perhaps 6 month expiry (leads into account expiration which we aren't quite there yet) or full ban which which we already have... it would be nice to have it automated instead of a request on production but if a security flaw is ever discovered with OAuth we could easily end up with zero accounts all of the sudden... so I'd rather not introduce that variable into the larger equation.

Also what kinda of spammer...

Think outside of the box. :)

@decembre
Copy link

Pff, i don't understand.
I want use a simple way to login.
Without have my email like usersname.
No more.

I try to connect with github and i am redirect to my google login form !
Your Signing form was no very clear, and the login is the same for me.

Delete my account please......

@Martii
Copy link
Member

Martii commented Jan 23, 2015

Pff, i don't understand.

About what?

I want use a simple way to login.

#1 (comment)

Without have my email like usersname.

I understand that some may not have seen the caution box that was added in #233 (reference) . Unfortunately there is nothing I can do about it until both issues are assigned/completed/closed. Sorry.

my google login form

Just a side note see #484 (comment)

Your Signing form was no very clear

"Sign up with a OAuth/OpenID service."... I can however link that into a page describing what that means without searching for that. That has been there the whole time I believe.

I wish I could help more but some portions are just out of my hands and I do apologize.

Martii pushed a commit to Martii/OpenUserJS.org that referenced this issue Jan 23, 2015
@Martii
Copy link
Member

Martii commented Jan 23, 2015

@decembre
I also show your auth as github not google.

@Martii
Copy link
Member

Martii commented Jan 24, 2015

@decembre
Just noticed you have two accounts. The one that matches your username here is googles auth. e.g. when you login with that username it will go to googles page. Please note that is deprecated. I'm attempting to familiarize myself with changing everyone to OAuth but it's still a bit out of my experience level at the moment. I have asked sizzle to attempt to do this again... in the meantime I will investigate hacking the DB again but there's a lot of portions of the code I am still unfamiliar with... e.g. there might be some unexpected consequences.

@decembre
Copy link

Thanks.....
The @.... inside User name was a problem for me.

@Martii
Copy link
Member

Martii commented Jan 24, 2015

@decembre
Make sure you can log in with your decembre account please and your other account will be removed by the normal means. I won't be doing this for everyone on demand because it takes a ton of time to do manually. Please respond by telling me you can login... your decembre account should be set to auth with GitHub now as default. Thanks.


P.S. I moved all found references from your old account to decembre too... deleted your one blank comment.


P.P.S. Looks like I have one more place to do this... complete.

@decembre
Copy link

I appreciate your effort for me:
Thanks Marti !
That's good now, I can connect normaly now;

Sorry for your "spare time" lost.
;-)

@Martii
Copy link
Member

Martii commented Feb 4, 2016

I've had some chatting with @sizzlemctwizzle about this lately and a heck of a lot of time to think about this... and the best way I can see to alleviate concerns is a "Resign my account" (virtual or physical) authentication that one can add to the account. (e.g. resign access on our end point with OAuth)

This will provide a level of protection against "drive by" spamming and should alleviate "ghosted" posts from conversations on those who didn't think before they signed up and may have conversations with others that won't make as much sense if an account is deleted... e.g. as a User/Author... one can resign access to the account... if at a later date someone wants to come back in with that authentication then they may ask here on development.

Authors can still delete their scripts, etc. but to maintain the integrity, as much as possible, a resignation of ones account currently fulfills that request.

Please note I'm still working on other things but I am open to PR's to handle this virtually or physically (e.g. a resignation strategy that always returns fail... must include resignation date as well for the stored "key") ... if no requested assignments are available I'll eventually get around to it.

External site ref(s):

@volconst
Copy link

@Martii I have to admit that I have also made mistake at the registration and would like to have my account deleted or renamed. I have connected to OUJS also with this GH account. Is this sufficient to identify me and delete the account? How can I privately communicate you additional details you may need?
Thank you

@Martii
Copy link
Member

Martii commented Nov 23, 2016

@volconst

or renamed

Doable.

privately communicate you additional details...?

Including your new username? e.g. how "paranoid" do you want to be? ;) :)

P.S. Btw do nothing on OUJS until this is possibly done as the DB modifications can be lengthy.

@volconst
Copy link

Not just paranoid, I feel also frustrated and ashamed and that's why I try to avoid publicity if possible.
If it's the only option, I will post a user username here.
What's even more dramatic is that both my identities will feel ashamed, actually me, myself and I.

@Martii
Copy link
Member

Martii commented Nov 23, 2016

@volconst
Since another project has me publicly I've gone public on my profile for the time being.

Things you must do:

  1. Send me an email with your old OUJS username.
  2. Include your new username.
  3. Send a message here saying you did it immediately thereafter. e.g. I want to see the email first time stamped then confirmation here that you did it.
  4. If you don't do all of these, in this order, the namechange won't happen. You are quite stealthy already and I think you know that.
  5. You have a limited time before I reconsider making my profile less public.

Mistakes happen so don't beat yourself up. I see nothing wrong with your old username but since you approached nicely I'll grant one change.

@volconst
Copy link

@Martii Just sent the mail.
Thank you for your time.

@Martii
Copy link
Member

Martii commented Nov 23, 2016

@volconst
Ensure that you are logged out of OUJS and then relogin with your new username please.

@volconst
Copy link

volconst commented Nov 23, 2016

This is cool - I have new username :)
Have a great day!

@decembre
Copy link

decembre commented Mar 28, 2017 via email

@Martii
Copy link
Member

Martii commented Mar 28, 2017

@decembre

I don't want create an other account, Just login. But at each time i choose the login form and in the 2th form i choose the google auth , and type my username

Use the upper input box with your username to "Login" and that should do it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

5 participants