Project

General

Profile

Wt::Auth. Logging for users without confirmed email should be optional.

Added by Alexey Chemakin almost 10 years ago

Hello!

Now there is no regular ability to deny users logging with unconfirmed email.

Moreover right after registration the user is automatically logged in.

I know not so many web sites which allow logging with unconfirmed email.

I think some wt_config.xml property or some policy managing function needed in next releases to manage the login behaviour in case of unconfirmed email (taking into account the case right after registration).

P.S.

A month ago I posted a question about this:

http://redmine.emweb.be/boards/2/topics/8921?r=8936

, but did not get an appropriate answer.

The answer, as I understood, was about logoff right after hardcoded login which is not so beautiful, IMHO.

I thought about "virtual bool AuthModel::validateField(Field field)" overriding and checking for confirmed email "by hands", but before I decided to make such a feature request :).


    (1-2/2)