Authentication and Account Management
Guide to authentication, account creation, and team management on bidcars.ch
Authentication and Account Management
The bidcars.ch platform offers a comprehensive authentication and account management system that prioritizes security, user-friendliness, and teamwork. This guide explains how to register, sign in, create team accounts, and manage them.
Registration and Login
Registration Methods
You can register on bidcars.ch using the following methods:
- Email and Password: Traditional registration with email address and self-chosen password
- Magic Link: Passwordless login through a link sent to your email address
- Google: Quick registration and login with your Google account
Registration Process
- Visit the registration page at
/auth/sign-up
- Choose your preferred registration method
- Enter the required information:
- For Email/Password: Email address and secure password
- For Magic Link: Just your email address
- For Google: Confirm authorization in the Google dialog
- Verify your email address through the link sent to your email
- After verification, you will be automatically logged in
Login Process
- Visit the login page at
/auth/sign-in
- Choose the method you used to register
- Enter your login credentials:
- For Email/Password: Email address and password
- For Magic Link: Email address (you will receive a login link)
- For Google: Confirm login in the Google dialog
- After successful login, you will be redirected to your dashboard
Password Recovery
If you forget your password:
- Click on "Forgot password" on the login page
- Enter your email address
- You will receive a password reset link
- Click on the link and create a new password
- Log in with your new password
Security Features
- Multi-Factor Authentication (MFA): Enhance your account security with a second authentication factor
- Secure Session Management: Automatic logout after inactivity
- One-Time Passwords: For certain security-relevant actions
Account Types and Structure
bidcars.ch uses a flexible account system based on team accounts:
Team Account
- Represents a company or organization
- Has a unique slug (part of the URL)
- Can have multiple members with different roles
- Supports company verification with UID/VAT
Each user is created with their personal area upon registration, from which they can create or join team accounts.
Creating a Team Account
To create a new team account:
- Log in to your existing account
- Navigate to "Teams"
- Click on "Create Team Account"
- Enter the required information:
- Company name
- Unique slug (for the URL)
- UID/VAT number (for Swiss companies)
- Company information (address, etc.)
- After successful creation, you will be automatically redirected to the new team account
Company Verification
Swiss companies can be verified with their UID/VAT number:
- Enter the UID/VAT number during team creation
- The system checks the number against the official Swiss business registry
- Upon successful verification, company information is automatically filled in
- Verified companies receive a verification badge on their profile
Managing Team Members
As an owner or administrator of a team account, you can manage team members:
Inviting Members
- Navigate to the members page of your team account
- Click on "Invite Member"
- Enter the email address and the desired role
- The invited person will receive an email with an invitation link
- After accepting the invitation, the new member will be added with the assigned role
Roles and Permissions
bidcars.ch offers a hierarchical role system:
- Owner: Complete control over the account and all functions
- Administrator: Can perform most administrative functions but cannot delete the account
- Member: Standard access to vehicle management and auctions
- Bidder: Can only view vehicles and bid in auctions
Each role has specific permissions:
Permission | Owner | Administrator | Member | Bidder |
---|---|---|---|---|
roles.manage | ✓ | ✗ | ✗ | ✗ |
billing.manage | ✓ | ✓ | ✗ | ✗ |
settings.manage | ✓ | ✓ | ✓ | ✗ |
members.manage | ✓ | ✓ | ✗ | ✗ |
invites.manage | ✓ | ✓ | ✓ | ✗ |
vehicles.manage | ✓ | ✓ | ✓ | ✗ |
bids.create | ✓ | ✓ | ✓ | ✓ |
Changing Roles
As an owner or administrator, you can change the roles of team members:
- Navigate to the members page
- Find the respective member
- Click on the action menu and select "Change Role"
- Select the new role from the dropdown menu
- Confirm the change
Note: You can only change roles that are lower in the hierarchy than your own role.
Removing Members
To remove a member from a team account:
- Navigate to the members page
- Find the respective member
- Click on the action menu and select "Remove"
- Confirm the action in the confirmation dialog
Note: The owner of an account cannot be removed. To remove an owner, ownership must first be transferred.
Account Settings
Personal Settings
Each user can manage their personal settings:
- Click on your profile picture in the top right corner
- Select "Settings"
- Here you can adjust the following settings:
- Profile information
- Change password
- Enable multi-factor authentication
- Language settings
- Notification preferences
Team Account Settings
As an owner or administrator, you can manage the team account settings:
- Navigate to the team account settings
- Here you can adjust the following settings:
- Company information
- Account name and slug
- Billing settings
- Payment methods
- Subscription plan
Subscription and Billing
Team accounts require an active subscription to use all features:
- Navigate to the billing page of your team account
- Select a subscription plan
- Enter your payment information
- Confirm the subscription
The subscription determines the feature set and limits of your team account, such as:
- Number of team members
- Number of vehicle listings
- Fees for successful sales
- Access to advanced features
Account Management Tips
- Enable multi-factor authentication for increased security
- Regularly review your team's member list
- Assign roles based on actual responsibilities
- Ensure sensitive functions are only accessible to authorized persons
- Keep your contact information up to date, especially your email address