Cloudron 10.1.3: does signing in with an app password (replacing impersonate) trigger the "new login location" mail?

[imc67]

My first server updates to 10.1.3 tonight, and I noticed this in the changelog: "users: impersonate is removed. Sign in as a user with an app password for the dashboard or for apps".

I sometimes sign in as a user to help them or to check what they see. Two questions about the new way:

1. Does signing in with an app password send the user the "new login from a new location" email? If so, users will get an alarming mail every time an admin helps them, which may cause confusion (or worse, teach them to ignore those mails).
2. How does an admin get that app password: can an admin create one for another user, or does the user have to create it and share it?

Thanks!

[girish]

App password based login does not send emails.

However, I think, as you pointed out I think the UI is may be confusing already. I will bring back the old impersonate and then it's clearer.

How does an admin get that app password: can an admin create one for another user, or does the user have to create it and share it?

Yes, admins can now create app passwords for another user from the Users page. Many of our app like Surfer, Container registry, Cubby etc integrate with this feature. So you can use create an app password as another user and use it in those apps. For example, say you have "devops" user which you use in the CI. Then you can go to devops user and create an app password for surfer deployment. Then the surfer History will show that the deploy was done by "devops" user.

Thanks for reporting, best to fix this before we do a wider rollout.

[imc67]

Thanks @girish, that's clear. Good to know that an app password login doesn't send a mail, and bringing impersonate back makes it a lot easier to explain to other admins. The option to create an app password for another user is a nice addition too, I hadn't spotted that yet.

[jdaviescoates]

Just FYI @imc67 @girish some apps themselves also send "new login" emails. I think it was Loomio I remember doing that, but I'd guess others also do it.

[girish]

Alright, impersonate is back. I removed the option to create app password for another user since this is causing much confusion. The feature was not well-thought-out.