Avatar Upload Access Tokens
BranVR
For people who commission models, a lot of times avatars are uploaded to the clients accounts directly. But this requires giving out your login info, once is enough for me, whether i trust the commissioner or not, and even more so if you commission multiple people.
Also applies to just any general situation. EX: friends wants to upload whatever model to my account.
My Proposal is to allow the client to generate a one time use access key to make uploads to their account. :)
Could be generated via the vrchat website.
Log In
Mayrui
Crazy this hasn't been added yet or at least acknowledged
BuzzerBlitz
Something like this would help hugely for the RP community I am apart of where in the past the public models for certain units were taken down in spite in a way to cause drama, fortunately we were able to create replacement models for players to use.
We've wanted to create a dedicated account(/s) for our public models to be uploaded to so we can avoid the repeat of the past bad actors however with no way to easily upload to the account securely (without the creators handing the files over which we do not want to force to do so) we could easily run into a worse solution were 1 person could delete it all.
Ch'Ih-Yu
I think with the clarifications in the recent developer update regarding private avatars and NSFW content, it's somewhat astonishing that a feature like this doesn't exist yet.
There is currently no safe way to share private avatars other than both parties having to use Unity and somehow exchanging a huge project file or instructing the client to import packages, just to upload something to their account.
I recently did a commission for someone and spent way too much time just explaining the convoluted mess of dealing with Unity Hub, Creator Companion and the Unity Editor.
The client had trouble understanding the basic concepts of operating a desktop computer, as they had mostly used gaming consoles and smartphones up until this point.
The barrier of getting started with custom avatars is just too high. And VRChat is doing little to nothing to make it any easier. It's basically "There is Unity. Good luck."
Having some secure way to help people out with their avatar customization would go a long way to make VRChat more accessible to tech illiterate people. And those people sure do exist.
Ch'Ih-Yu
VRChat already has a system of making avatars available to someone else which is their integration with readyplayer.me.
I obviously have no idea how it works internally and it's probably purpose-built for that very platform, but I'd imagine that it should be possible to have a similar system for commissioned content.
kyuu kyuu
I highly, highly suggest this feature. The VRC clarification announcement feels very ignorant of its own limitations. VRC wants to discourage us creators from sharing login information when there just isn't an alternative. The Marketplace is not a viable solution for many creators and does not allow custom commissions. It was extremely disheartening to see the passive aggressive and clipped comments from VRC Discord mods when I believe these concerns are very valid.
I think there is no better option than to create upload access tokens; I believe this is the right track to combat login and account safety while also continuing the creation of paid, commissioned, and private avatars. Not every user has a PC, not every user has a PC strong enough to handle Unity and Blender, and not every user has the ability to learn an entirely new skillset with model creation.
I hope VRC takes this suggestion seriously as it would keep the community safe and happy.
A
Augist
I recently thought of this and was happy to see someone else suggested it. I have so many friends who do commissions / make models for friends who would love this. I'll write out my method for it that I already wrote in my own words:
Say my friend does a retexture for me, and I don't know how to use unity. They set up the project and all, but in order for the avatar to be uploaded onto my account, the only possible way (that I am aware of) is for them to actually log into my account and upload it for me, which can be super unsafe and is obviously never recommended.
An idea I had, while working on my friend's avatar, was that we have a code on vrchat.com that is essentially an upload token, a randomized integer / string, that can be plugged into the VRChat Builder in Unity, that points your upload to a person's account. The person would then, upon successful upload completion, have a notification / section on their vrchat.com account that shows their pending avatar upload, and they can confirm it or deny it depending on if they trust the user that pushed the upload.
Additionally, for further safety, in case your code gets hijacked and spammed, you can simply refresh the upload code, to keep it clean and safe.
I'm not super versed with how the internal systems of uploading an avatar work, but surely something like this would be possible? I feel it would be an incredibly appreciated service.
Rito, plz add
Fuuujin
I think this is very important.
Users should be able to generate:
- One-time-upload token
- Token that allows updating the specific ID tied to this token indefinitely
- Unlimited uploads token (maybe, not sure how problematic this could be)
SaphiGoat
an alternative could be the transfer of the ownership of an avatar/world
DarkSwordsman
SaphiGoat: I do like this idea as a separate thing actually! Though it would make it a little difficult to do updates.
kittyn․
DarkSwordsman: In that scenario, you could just do the update and transfer the new version - although that kind of system would likely use tokens to track ownership
DarkSwordsman
This is a really important feature. Allow a temporary token for access to the account at bare minimum would allow people to upload avatars with ease and keep their account secure. Could even go farther to have a "whitelisted accounts" section, where you can allow certain accounts permission to upload avatars on your account (but not delete).
Fuuujin
I think this is a good idea and should be revived in 2023.
Load More
→