WeblateOrg / WeblateOrg/weblate

Allow account deletion even when email authentication is disabled

Open
#12,799 2 comments 0 reactions 1 assignee Claimed by @amCap1712 View on GitHub
enhancement Waiting for: Implementation
Dominant language
Python
Stars
6.1k
Forks
1.4k
Avg merge
9h 53m
Merged PRs (30d)
395

Description

### Describe the problem

Currently, if a Weblate instance has email authentication disabled (`social_core.backends.email.EmailAuth` is not defined in `AUTHENTICATION_BACKENDS`, and a different backend - e.g. a OAuth2 provider - is used), the delete user page returns a 404.

### Describe the solution you would like

The user would be able to delete their account even if they have no password set (for example, they could be asked to verify the request by logging in with whatever method they used to log in for this session, or the deletion page could skip the verification entirely and simply delete the user's account).

### Describe alternatives you have considered

Admins can still delete users manually upon request, but this is impractical.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.