[Feature] Support multiple pins/one time links

[starsoccer]

I currently use dumbdrop for sharing files with myself, but sometimes Id like to let someone else upload a file to me. Ideally I dont want to give them my pin, and would prefer they use their own pin code, or ideally share a one time link that will let them upload some files.

[gitmotion]

hm feels like multiple pins could be a security issue 🤔

a workaround for now could be to set up separate dumbdrop instance with the same volume mappings that you could use for other people with a different PIN that you share with them and just bring that instance up/down whenever you need/dont need it

one time links might be interesting though

[starsoccer]

Curious how multiple pins would be a security issue? An alternative would be perhaps unique links for different pins like /alice to use alice's pin.

The goal is really just to have a way to let other users access the drop, without having to give out my pin.

[gitmotion]

maybe just my own paranoia 😅 just thinking ahead but even though there is brute force protection increasing the potential amount of successful outcomes could become a risk since pins are only digits based and easier to crack. (incase users set a bunch of pins)

to spitball with your idea, maybe it's a combination of either alphanumeric passwords, revokable auth tokens, etc

but good idea that i'll be thinking more about! i'm sure there's a good solution to this

[starsoccer]

Makes sense, I was thinking about it from the point of view if you have different pins(of hopefully different lengths), it becomes even hard to guess vs the current its always X digits

Yeah, I like the idea of revocable auth tokens. In general I think there are 2 main use cases here

1. I want someone else to upload files to me as a one time thing, so I need a one time link, etc.. for them to upload files
2. I am on an untrusted machine and dont want to enter my pin to upload a file

[max-tet]

+1 for one-time links.

I'd like to have a list of links each with a short name, size limit, expiration date (,nr of files/usages limit?, file type filter?...), and a button to copy it to clipboard. It contains a token in a query string for authentication. When someone else uses the link, the files are placed in a subfolder like /foreign_uploads/<link_name> or something.

Oh and all links should be under a special URL path like /upload/... or something such that path-based access control like freeshard does it is possible. (Disclosure: I am the maintainer)