Please improve user registration

[kaffeeringe]

I wanted to give access to my Nextcloud to a group of 30 people. Only a third of them was able to register properly, because the tokens outdate too soon. Now, I can't even see whose account is activated and whose isn't. That is pretty unsatisfactory to the users and very annoying for me.

What can I do to see, who has a login and who hasn't?
What did I do wrong?
How can I improve this user experience?

[MorrisJobke]

This is a community app which is maintained by @pellaeon - please reach out in that bug tracker: https://github.com/pellaeon/registration

Thanks

[MorrisJobke]

Maybe @nextcloud/designers can jump in and have a look at the UI/UX part.

[kaffeeringe]

The registration app is not a solution. I can't open registration to the public. I only want to invite 30 people. And that would work with the core if the tokens didn't outdate so fast.

[jancborchardt]

@kaffeeringe so you didn't use the registration app here? Can you describe the steps?

[juliusknorr]

Can't users then just request a new token via the reset password form?

[kaffeeringe]

@jancborchardt: I didn't use the registration app.
@juliushaertl: As described here: https://docs.nextcloud.com/server/13/admin_manual/configuration_user/user_configuration.html#creating-a-new-user
I checked "Send email to new user" and then left the Password field empty, when I added one user after another. They all received the e-mail - but some of them only clicked on the link hours or days later, so their token was outdated.

By the way "Token outdated" is not an error-message that anybody understands, nor does it help to solve the problem. My suggestion:

1. I should be able to set a time for the token, or disable it.
2. The error message should be something like "the link you clicked is outdated - it was only valid for x hours. Please do y to solve the problem.
3. The user management should display which account is confirmed any which isn't.
4. I should be able to resend the token or copy the link to send it on another medium. For example a messenger, if the e-mail gets lost in spam folders etc...

[jancborchardt]

Absolutely agree. What's the current expiration time and what should it be expanded to?

Regarding wording: Instead of "Token outdated", we should use "Registration link expired".

[melkon]

The current timeframe is 12 hours and probably best to be expand at least to a day, or better, let it be set by the admin themselves via the settings menu (like a dropdown similar to the quota settings).

[MorrisJobke]

The current timeframe is 12 hours and probably best to be expand at least to a day, or better, let it be set by the admin themselves via the settings menu (like a dropdown similar to the quota settings).

Before thinking about adding settings we should think about a good solution first. A good read about this is http://neugierig.org/software/blog/2018/07/options.html and the linked articles.