[GH-ISSUE #922] Configure disabling magic link sign-in #649

Closed
opened 2026-02-25 23:43:09 +03:00 by kerem · 5 comments
Owner

Originally created by @strboul on GitHub (Dec 6, 2023).
Original GitHub issue: https://github.com/healthchecks/healthchecks/issues/922

In the home page, there's an option to sign-in with magic links. It'd be nice to have it gone for some self-installations that have no SMTP host configured.

For example, SIGNIN_DISABLE_MAGIC_LINK (default True)

Originally created by @strboul on GitHub (Dec 6, 2023). Original GitHub issue: https://github.com/healthchecks/healthchecks/issues/922 In the home page, there's an option to sign-in with magic links. It'd be nice to have it gone for some self-installations that have no SMTP host configured. For example, `SIGNIN_DISABLE_MAGIC_LINK` (default `True`)
kerem 2026-02-25 23:43:09 +03:00
  • closed this issue
  • added the
    feature
    label
Author
Owner

@cuu508 commented on GitHub (Dec 7, 2023):

Thanks for the suggestion.

I'm not planning to work on this in near term myself, but I will accept a PR if changes are minimal and not disruptive.

I don't think a new setting is necessary, you could check if the EMAIL_HOST setting is empty (which is the default).

<!-- gh-comment-id:1845451809 --> @cuu508 commented on GitHub (Dec 7, 2023): Thanks for the suggestion. I'm not planning to work on this in near term myself, but I will accept a PR if changes are minimal and not disruptive. I don't think a new setting is necessary, you could check if the EMAIL_HOST setting is empty ([which is the default](https://github.com/healthchecks/healthchecks/blob/f33c296349b9e7f26338555267e1111fb851cf84/hc/settings.py#L225)).
Author
Owner

@cuu508 commented on GitHub (Apr 15, 2024):

cc: #989

<!-- gh-comment-id:2056192237 --> @cuu508 commented on GitHub (Apr 15, 2024): cc: #989
Author
Owner

@ilium007 commented on GitHub (Jun 10, 2025):

Is there any way to extend this to enable the magic link to be disabled if EMAIL_HOST= is configured. I have a limited number of SMTP that can be relayed via a third party provider and do not want bots spamming / generating emails from the login page.

<!-- gh-comment-id:2958075798 --> @ilium007 commented on GitHub (Jun 10, 2025): Is there any way to extend this to enable the magic link to be disabled if `EMAIL_HOST=` is configured. I have a limited number of SMTP that can be relayed via a third party provider and do not want bots spamming / generating emails from the login page.
Author
Owner

@cuu508 commented on GitHub (Jun 10, 2025):

@ilium007 sign-in links are only sent for accounts that exist. If bots submit the form, they will likely use email addresses that have no corresponding account and so no email will be sent.

<!-- gh-comment-id:2958131739 --> @cuu508 commented on GitHub (Jun 10, 2025): @ilium007 sign-in links are only sent for accounts that exist. If bots submit the form, they will likely use email addresses that have no corresponding account and so no email will be sent.
Author
Owner

@ilium007 commented on GitHub (Jun 10, 2025):

Ok thanks

<!-- gh-comment-id:2958135774 --> @ilium007 commented on GitHub (Jun 10, 2025): Ok thanks
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/healthchecks#649
No description provided.