Nologin shows the risks of no-login file sharing

Nologin is a web tool for sharing text and files without creating an account. A person chooses a page name, pastes text or uploads a file, then opens the same link from any device or browser. Its main features are text sharing, file sharing, custom share links, password protection, edit locking, and notes or files that expire automatically.

The product was made for situations where someone needs to move a code snippet or file from a shared computer without logging into email or a messaging app. The stack uses Next.js for the frontend, Firebase and Firestore for the database, for file storage, and Vercel for hosting. The first version let the browser write directly to Firebase Storage, so upload limits could be bypassed through .

Someone did bypass those limits and quickly increased storage use. The fix was to move all uploads behind access, so the browser no longer writes directly to storage.

Key points

  • Nologin lets people share text and files without signup or accounts.
  • It supports custom links, password protection, edit locking, and automatic expiry.
  • The product targets quick transfers from shared computers, labs, libraries, or any browser.
  • upload limits were bypassed through .
  • access fixed the direct storage write problem.
Read original