Magic Links for folder/file sharing (passwordless sharing)

How to use GitHub

Could Nextcloud be given the ability to send ‘Magic Links’ for sharing files or folders?

I know it’s possible to email a link when you want to share an asset externally. But is there a mechanism that does it in a two stage process where a link is emailed, the user clicks the link to request a time-limited download link to be sent to their email, and they use that emailed link to get the file?

Basically, the idea is to share externally while preventing the external user from sharing the link to the actual asset without having to administer another user account.

Lots of websites do a variation on this, but I’m not clear on the options offered by Nextcloud be it vanilla or via plugins.

I believe these are called ‘Magic Links’. It would be a seriously useful thing for Nextcloud to add.

It’s a good improvement on just sending password protected links as it, within acceptable reason, ensures that the downloader has access to the email account to which you’ve sent the link, doesn’t hinder their downloads (especially good if sharing a folder), and if the data spreads beyond that (via direct access to your NextCloud), then, more than likely it was done in collaboration with the intended recipient, in which case there are other issues afoot.

Just sharing a link, even with a password opens up an inadvertent vector if the recipient forwards the email.

Anyway - I think it’s a very good UX and has reasonable (not airtight) security built in.

No files, tests, or entry points are named. Start by reviewing Nextcloud’s existing external file and folder sharing flow and its emailed-link behavior, then define the authentication, expiry, and download requirements for a magic-link design. Done means an agreed implementation scope and tests covering the two-stage email flow.