3 ms·
Might be worth-while making the search case-insensitive - looks good, though! EDIT: Hmm. I tried logging in with the token emailed to me using Safari - that w
by JosephRedfern 12y ago
Might be worth-while making the search case-insensitive - looks good, though!
EDIT: Hmm. I tried logging in with the token emailed to me using Safari - that worked. I then tried logging in using Chrome with the same token, and got this error: http://i.imgur.com/D4j45c3.jpg http://i.imgur.com/D4j45c3.jpg. I then tried going back to notello.com, but seem to constantly get re-directed back to the error page.
- ny2244111 12y agoHmm, yea I made it so that each password token can only be used once in case someone gets a hold of your email. I can see how that can be annoying. I'll work on a solution to that. Thanks for the feedback.
- JosephRedfern 12y agoYeah, that makes sense - the problem was the resulting lock-out.
- shanecleveland 12y agoIf someone gets a hold of your email, they could easily request another login token anyway. I think it's fine if it doesn't expire.
- ny2244111 12y agoNow I remember why I made it expire and/or only usable once. Consider public places or caching. Since the temporary authentication token is exposed in the URL there is a risk that someone else can reuse it. Whereas if it's a one time temporary token then you should be OK. I think I need to be more explicit in that this is a one time token. The whole passwordless thing is new so there are some pain points.