Login Accounts¶
Overview¶
This page describes login accounts used on the Traquito website.
Traquito uses a database behind-the-scenes to help keep information useful to site users (eg Channel Registrations).
To make this all work, users need to be able to log in to see and modify their data.
The login and account system is as minimal as possible to get the job done properly.
Accounts¶
Login accounts let you store data with the website
For instance, registering a channel to use in a flight, that gets stored in a database.
That database is only allowed to access your data with your login and password.
Login and Password¶
Account Widget
In the upper-right corner of pages that make use of login accounts you will see an Account Widget.
The Account Widget controls the state of your being logged in, creating accounts, lost password, etc.
Click it!
Create a user
From the widget you can create a new user account.
Log on
From the widget you can log on.
Log out
From the widget you can log out.
You don't really ever need to log out unless you want to log in as another account (which is totally fine).
Login Sequence¶
Once logged in, you stay logged in
Any page which uses login details to serve content will try to automatically log you in
Widget when not logged in:
Widget when actively logging in (usually automatically unless you log out):
Widget when successfully logged in:
Administrators¶
Administrators exist to help with account issues and maintenance.
Who they are¶
Administrators are the site maintainer and nominated helpful people
Reach out to them if you need help!
- Contact them on the forum, or
- Email them directly
What admins can do¶
Admins can reset your password for you
You can get to the "forgotten password" dialog through the account widget.
Admins can unregister stale channel reservations
This is good as some people register and forget. We want the ability to periodically clean up.
No one is ever forced out of a registration they're using
You will get weeks of warning and option to renew your registration.
See Channel Map Help for more details.
What admins can't do¶
Admins cannot see your password
Account Security¶
Passwords are stored securely and not visible to anyone
Account passwords are validated by using a "Salted Hash" (best industry standard).
This means, the password as you type it is never stored, so neither computers nor people can see it.
The process is this to create an account
- You type in your password, and the web browser (eg chrome) sends it to the server
- The server takes that password and:
- Generates a random number (the salt)
- Combines that number with your password (salt+password)
- Hashes salt+password
- Stores the salt and hash and throws away your password (never stores it)
The process to log in
- You type in your password, and the web browser (eg chrome) sends it to the server
- The server takes that password and:
- Looks up the random number (the salt)
- Combines that number with your password (salt+password)
- Hashes salt+password
- Compares that hash to the hash generated when you created your account
- If it matches you're in, otherwise no
- Throws away your password (never stores it)
This is how the server is able to never store your password, and why no human or computer can get access to learn it.
Choose a good password!
You should choose a UNIQUE password to this site that has complexity and length.
Use a password manager to remember it! (eg LastPass or Google Password Manager)
Migrated Accounts¶
Historical accounts existed previously and are migrated in
Accounts which existed in the old Channel Map have been automatically migrated to the new system.
These accounts had extremely minimal password requirements. Migrated accounts retain the passwords from before, even though new accounts cannot use such unrestricted passwords.
New accounts must meet the new password complexity and email address requirements.