Server: Email invitation token validness time should be adjustable

Created on 15 Jan 2018  路  8Comments  路  Source: nextcloud/server

Invitation emails become invalid over the weekend.

Expected behaviour

Email invitations should stay valid for ~10 days, or up to a configurable amount of time.

design enhancement security

Most helpful comment

There shouldn't need to be a setting for a detail like this. They should simply be valid for a longer, reasonable time (like 10 days as mentioned).

And in the users management, there should be a way to "Resend invitation" in the 3-dot-menu. (Additionally, never active users could be sorted up top, or there could be a navigation entry for them.)

All 8 comments

cc @nextcloud/designers for the UX part of this.
cc @nextcloud/security for the security part of this.

Invitation to what?

Invitation to become a user of the nextcloud instance.

Just wanted to second the OP in this request - there should be a setting for this. BTW what is the current validity interval? Seems I can't find this info, and my invitations expired in a few days or so... And no way to resend them also?

The situation seem to worsen: Now the token became invalid over night.

There shouldn't need to be a setting for a detail like this. They should simply be valid for a longer, reasonable time (like 10 days as mentioned).

And in the users management, there should be a way to "Resend invitation" in the 3-dot-menu. (Additionally, never active users could be sorted up top, or there could be a navigation entry for them.)

Any news on this? Invitation with user-set passwords is hardly working like that.

It was changed to 7d with Nextcloud 14: #10942

Let's close this then.

Was this page helpful?
0 / 5 - 0 ratings