opensafely-core / opensafely-core/opencodelists
Prevent spam users from signing up
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 60
- Forks
- 16
- Avg merge
- 4d 12h
- Merged PRs (30d)
- 17
Description
We've had a large number of not-genuine users sign up to Open Codelists. We're removing them (#2113), but we should also prevent new spam users from successfully signing up.
There are some suggestions in the parent issue. However, @tomodwyer had some good alternative suggestions, including simply adding in password verification. This has the advantage of being useful to genuine users as well as potentially being an easy way of stopping spam signups.
Some consideration should be given to how we'll know if this change has worked. This could be as simple as a slackbot reminder to the team to check the list of users in a few months time.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading the parent issue #2064 and the discussion about password verification and other signup controls. Clarify which approach the team will use, then define how success will be measured, including the proposed later review of the user list.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100