XF 1.5 Login via URL

[bloh]

I want to achieve this:

When receiving new conversation email notification, the link button should lead to the conversation & automatically log in for the user.

Any idea how?

 

[meetdilip]

Without even having cookie in browser ?

 

[bloh]

Yes. Without cookie. No matter where you are, just click the link & it will auto login.

 

[meetdilip]

How safe is it ?

 

[Robust]

You can generate unique tokens to also log a user in and set them to expire and set them with the link in the email. It is secure in the sense that a random person most likely wouldn't get access (easier to guess a password than a 32 character string that expires in a day or so). However, if someone else gets the email and clicks the link or the email is sent over an insecure channel then someone else could use the link to log in.

This will require custom development either way. It's not a core feature in XenForo.