Skip to content

Implement email validation #4

@ReidyT

Description

@ReidyT

For now the user is logged in automatically after registration and the email is not valid.

The purpose here would be to send a registration link at the registered email to validate the user (before the user should not be able to log in).

This also prevent the current email leakage. Indeed, we are currently returning a 409 (Conflict) error when reusing email. If we have the email validation system, we can just indicate to the user that a validation link was sent. If the email already exist, the email suggest the user to change its password, otherwise, the email includes the registration link. This way, a malicious user can't discover emails.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions