[#15712] - Possibiltity to login with username OR email
- Closed
- 2 May 2017
- Low
- Build: 3.7
- # 15712
On most (non Joomla!-)sites/shops were I'm registred there is the posibility to login with the username OR the registered email address (and the password). And I think this is a missing feature in Joomla!
I can do a PR, but first wanna here some other thoughts about it.
Ist it worth? Would it be a real addition, or more a security flaw? Should it be realised as an option (e.g. of com_users), as it is a bit less secure? Maybe only available in frontend? Or backend too?
What do you think?
I think this would be a nice feature to have! I suggest you create a PR.
Just a note that there are more extensions doing just that.
For example this one https://extensions.joomla.org/extensions/extension/access-a-security/site-access/authentication-email/
| Priority | Medium | ⇒ | Low |
| Status | New | ⇒ | Discussion |
| Category | Authentication | ⇒ | Authentication Feature Request |
Thanks for your thoughts. And the link.
But I think this should be a core feature and not provided by 3rd party - as it is common in many (or most) other web 'systems' as a standard.
The question is, should it be optional by configuration or fix inbuild and available to avoid to bother site-admins with one more thing to think, descide and configure.
The downside is a little decrease of security (email guessing), and thus the question, should the site admin able to descide or not.
It's fine as an extension (not every behavior must be included in the core package) and even if it were in core it must be a configurable item and not arbitrarily locked one way or the other.
| Status | Discussion | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2017-05-02 05:40:10 |
| Closed_By | ⇒ | franz-wohlkoenig |
| Closed_Date | 2017-05-02 05:40:10 | ⇒ | 2017-05-02 05:40:11 |
| Closed_By | franz-wohlkoenig | ⇒ | joomla-cms-bot |
Set to "closed" on behalf of @franz-wohlkoenig by The JTracker Application at issues.joomla.org/joomla-cms/15712
closed as having PR #15725
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/15712.
Sounds like an interesting idea. More and more online services do allow multiple login options like username, email or telephone. Can't estimate the security impact.
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/15712.