Our Personal Data Server from scratch! tranquil.farm
oauth atproto pds rust postgresql objectstorage fun

Verification email cannot be resent #18

closed opened by a.starrysky.fyi

What happens#

When logging in, your account needs to be verified. If you're not verified, you must respond to the original verification email - there is no clear way to resend it.

Why should you care?#

This is probably normally fine, but if the email doesn't get through -e.g. if standing up a new server and testing SMTP config, if the user's mailserver rejects the email, etc.- there's no way I can see to resend the verification email.

It's also not enough to reset your password or security token via email, this doesn't count as making your account "verified".

This effectively locks up the account

Mitigation#

I manually went into postgres and verified the account.

It would be nice if:#

  • Logging in when unverified resent the verification email
  • Interacting with some other email than a "verification" email still verified your account

Working on this now; both presented options sound feasible and sane

There's now a new verification notification that gets sent on unverified login. Let's see how this fares and we can open a new issue if there is more work to do :3

sign up or login to add to the discussion
Labels

None yet.

assignee

None yet.

Participants 2
AT URI
at://did:plc:uuyqs6y3pwtbteet4swt5i5y/sh.tangled.repo.issue/3mef6owxrme22