Users & Profiles

Registration & Login

Login and registration happen through a modal on the homepage: /?modal=auth. GET requests to /login and /register without form data redirect to the modal.

Action	Route
Login	POST /login
Register	POST /register
Logout	POST /logout

After registration the platform may require email verification — configured in Admin Panel → Authentication (/admin-panel/settings/auth) → Require email verification.

Rate Limits

Group	Limit
Login	5 requests per minute
Register	5 requests per minute
Comments	30 requests per minute
Media	20 requests per minute
Private messages (chat)	60 requests per minute
Payment webhooks	120 requests per minute

One Tap (Google / Yandex)

Guests can see a quick sign-in prompt via Google One Tap or Yandex One Tap. Enable in Admin Panel → Authentication (/admin-panel/settings/auth) → Quick sign-in. Each provider requires a configured Client ID in the corresponding OAuth block.

One Tap authentication: POST /one-tap/{provider}.

OAuth (Social Login)

Supported providers:

Provider	Enable in
Google	Admin Panel → Authentication
Yandex	Admin Panel → Authentication
VKontakte	Admin Panel → Authentication
Facebook	Admin Panel → Authentication
Apple	Admin Panel → Authentication
GitHub	Admin Panel → Authentication

Each provider requires Client ID and Client Secret — obtained from the provider's developer console and entered in the Admin Panel. Callback URIs for each provider are in Service URLs.

Password Reset

The form is available in the auth modal (/?modal=auth). Request a reset link: POST /password/email. Reset via email link: POST /password/reset; token page — /email/reset.

Cookie Consent

The cookie consent banner submits the user's choice via POST /cookie-consent.

Banner text and behavior — Admin Panel → Cookie Consent (/admin-panel/settings/cookie-consent).

Public Profile

Profile page: /{slug}

A profile includes:

• Avatar — static image or video avatar (by subscription)
• Header — profile background image
• Name and bio — short description
• User's posts
• Follower and following counts
• Rating badges (with applicable subscription)

Account Settings

Settings page: /settings

Section	What's configurable
Profile	Name, bio, avatar, header
Password	Change password
Notifications	Which notifications to receive
Online status	Show/hide "online" status
Default feed	Personal / Popular / New

Following Authors

Users follow authors — their posts appear in the personal feed.

• Follow: POST /follows/{user}
• Unfollow: DELETE /follows/{user}
• Follower list: /profile/{user}/followers

Ignoring Users

Ignored users' posts and comments are hidden from feeds and comment sections.

• Add to ignore: POST /ignore/{user}
• Remove from ignore: DELETE /ignore/{user}

Posts and keywords can also be ignored (ignored_keywords).

Private Messaging

Private chats: /m

• Conversation list: /m
• Chat with user: /m/{chat}
• Start new chat: POST /m/start/{user}

Messages are delivered in real time via WebSocket (Reverb).

Soft Account Deletion

When deleted, an account is soft-deleted — data is preserved. Users can restore their account at /account/restore.

Permanent deletion of accounts:

php artisan users:purge-deleted

User Rating

Users earn a rating based on activity and post popularity. Rating place history is stored in the rating_place_histories table.

Update rating:

php artisan rating:update-place-history

The Top Authors widget in the sidebar shows the highest-rated users. Management — Admin Panel → Top Users (/admin-panel/top-users).

Subscription-Gated Features

Some profile capabilities are only available with an active subscription:

Feature	Description
Video avatar	Short video instead of static avatar
Custom badges	Personal icons/badges on the profile
Fancy nickname	Special styling for the username

User Management in Admin Panel

Admin Panel → Users (/admin-panel/users):

• Search by name, email
• View profile and history
• Edit account data
• Grant/revoke administrator roles
• Configure admin section access

Roles & Permissions

Role	Access level
User	Standard site access
Administrator	Admin Panel access (configurable per section)

An administrator's access to sections is defined in Admin Panel → Admin Permissions (/admin-panel/admin-permissions). Each section can be enabled or disabled individually.