[Question] Wouldn't there be a need to change the registerUser process to not use an email server? #4374
Unanswered
SEOLJINYOUNG
asked this question in
Q&A
Replies: 1 comment
-
No because this would signal to the user that the email exists to possibly exploit it for login. It's highly unlikely but that is the rationale from a security perspective. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
My .env setting

When a user registers with an email address that has already been registered,
there is a process to determine whether the email address has already been registered.
However, the result of this process is to output a log that is invisible to the user, saying 'Check your email address to verify your email address', and when a message appears on the UI screen saying that registration has been successful, it switches to the login screen.

Wouldn’t there be a need for a separate process to notify you that the email address is already registered?
Or is there a connection setting that solves this problem?
Beta Was this translation helpful? Give feedback.
All reactions