Is your feature request related to a problem? Please describe.
We see an influx of unwanted spam bot user registrations which try to exploit unsafe configurations
Currently, there is no adequate protection against spam bots during the registration process, leading to an influx of spam accounts. Additionally, there is no easy way for administrators to block specific email domains or manage email whitelists and blacklists effectively. This results in frustration when trying to maintain a secure and spam-free user base.
Describe the solution you'd like
Implement spam bot protection mechanisms during registration, such as captchas or similar tools, to prevent automated account creation.
Add admin functionality to block or restrict unwanted email domains with ease.
Introduce options to maintain white and blacklists for email addresses, allowing for granular control over the registration process.
Do not rely on first user creation equals admin. This should be provided via inital configuration/env-variables
Describe alternatives you've considered
Manually filtering and removing spam accounts, which is time-consuming and inefficient.
Using third-party email validation tools, which might not integrate seamlessly with the current system.
Additional context
Spam bot protection would significantly enhance the registration process's security and user experience. An admin-friendly interface for managing email restrictions will streamline the workflow for administrators, making it easier to combat spam. If needed, I can provide mockups or further details about the proposed features.
Originally created by @vosiander on GitHub (Nov 17, 2024).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/6992
# Feature Request
**Is your feature request related to a problem? Please describe.**
We see an influx of unwanted spam bot user registrations which try to exploit unsafe configurations
Currently, there is no adequate protection against spam bots during the registration process, leading to an influx of spam accounts. Additionally, there is no easy way for administrators to block specific email domains or manage email whitelists and blacklists effectively. This results in frustration when trying to maintain a secure and spam-free user base.
**Describe the solution you'd like**
1. Implement spam bot protection mechanisms during registration, such as captchas or similar tools, to prevent automated account creation.
2. Add admin functionality to block or restrict unwanted email domains with ease.
3. Introduce options to maintain white and blacklists for email addresses, allowing for granular control over the registration process.
4. Do not rely on first user creation equals admin. This should be provided via inital configuration/env-variables
**Describe alternatives you've considered**
- Manually filtering and removing spam accounts, which is time-consuming and inefficient.
- Using third-party email validation tools, which might not integrate seamlessly with the current system.
**Additional context**
Spam bot protection would significantly enhance the registration process's security and user experience. An admin-friendly interface for managing email restrictions will streamline the workflow for administrators, making it easier to combat spam. If needed, I can provide mockups or further details about the proposed features.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @vosiander on GitHub (Nov 17, 2024).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/6992
Feature Request
Is your feature request related to a problem? Please describe.
We see an influx of unwanted spam bot user registrations which try to exploit unsafe configurations
Currently, there is no adequate protection against spam bots during the registration process, leading to an influx of spam accounts. Additionally, there is no easy way for administrators to block specific email domains or manage email whitelists and blacklists effectively. This results in frustration when trying to maintain a secure and spam-free user base.
Describe the solution you'd like
Describe alternatives you've considered
Additional context
Spam bot protection would significantly enhance the registration process's security and user experience. An admin-friendly interface for managing email restrictions will streamline the workflow for administrators, making it easier to combat spam. If needed, I can provide mockups or further details about the proposed features.