[Feature] Restrict access to shared links using email auth

[itskagee]

I have searched the existing feature requests to make sure this is not a duplicate request.

• Yes

The feature

Hi,

Currently, the process of restricting public access to shared albums is via a password.
I was wondering, would it be possible to implement access restrictions using email authorization?

So the current process goes something like this:

• Me and my friends go on a trip.
• I don't want my friends to be users on my Immich instance, so I create a shared album for all of us to combine our photos in.
• Since I don't want this without some type of authentication, I put a password on it.
• I share the link and the password, and we all put our shared photos in.

Now, sometime later, my friends could want to view the photos of our trip again, and they would either have to dig the password out of the chats, or ask me what it was.

This could get unwieldy real fast with lots of shared albums, among other things (requirement of manual intervention, possibility of link and password being seen / accessed by malicious actors etc).

If there was a way for me to restrict the shared link to specific email addresses, and only those email addresses could log in via their email provider and gain access to the album, then this would solve this problem in my opinion.

The new flow would probably go something like this:

• I create a shared album and specify which email addresses should be able to access it.
• I send the link to my friends, and they see a 'Login using your email provider' button (e.g. Login using Google, Login using Apple etc).
• Once they log in, and the authorization is successful, they proceed with the upload / view,
• If their email was not in the allow list, they see an access denied message.

Is something like this already possible in the current implementation?
And if not, does it sound good / feasible enough to be implemented?

Platform

• Server
• Web
• Mobile