Feature #3246
closedWt::Auth. Logging for users without confirmed email should be optional.
0%
Description
Hello!
Now there is no regular ability to deny users logging with unconfirmed email.
Moreover right after registration the user is automatically logged in.
I know not so many web sites which allow logging with unconfirmed email.
I think some wt_config.xml property or some policy managing function needed in next releases to manage the login behaviour in case of unconfirmed email (taking into account the cases right after registration and password updating).
Related issue discussion:
http://redmine.emweb.be/boards/1/topics/9152?r=9162
Related topic in help:
http://redmine.emweb.be/boards/2/topics/8921?r=8936
Updated by Korneel Dumon over 10 years ago
- Status changed from New to Resolved
I added a method "setEmailVerificationRequired" in AuthService. When this is enabled verifyPassword() will return "EmailUnconfirmed".
Updated by Koen Deforche about 10 years ago
- Status changed from Resolved to Closed