starred/pocket-id
1
0
Fork 0
mirror of https://github.com/pocket-id/pocket-id.git synced 2026-02-05 00:39:38 +03:00
Code Issues 61 Packages Projects Releases 10 Wiki Activity

🚀 Feature: Email Login Codes should be usable only on the device that requested them #563

New Issue
Closed
opened 2026-02-04 20:28:44 +03:00 by OVERLORD · 0 comments
OVERLORD commented 2026-02-04 20:28:44 +03:00
Owner
Copy Link

Originally created by @ItalyPaleAle on GitHub (Dec 8, 2025).

Feature description

For security reasons, email-based login codes should only be usable on the same device / browser that requested them.

Practically speaking, when users request an email login code for themselves, a cookie is set in the browser. The login code should be redeemable only if the cookie is available in the same browser.

Pitch

Other apps enforce similar requirements, as this prevents certain kinds of social engineering attacks.

Originally created by @ItalyPaleAle on GitHub (Dec 8, 2025). ### Feature description For security reasons, email-based login codes should only be usable on the same device / browser that requested them. Practically speaking, when users request an email login code for themselves, a cookie is set in the browser. The login code should be redeemable only if the cookie is available in the same browser. ### Pitch Other apps enforce similar requirements, as this prevents certain kinds of social engineering attacks.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
breaking
bug
bug
bug
documentation
feature
needs more upvotes
open to pull requests
pull-request
Mirrored from GitHub Pull Request
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
OVERLORD
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/pocket-id#563
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?