Erudika/scoold

Unable to change email twice

fpellet opened this issue · 2 comments

fpellet commented

Hello,

With the latest version, when the user changes email and validates (with the 2 emails), their profile is updated.
However, when they try to change their email again, they get the error "Your email does not match any of the approved domains." (msgcode.9).
On my configuration, there's no whitelist and I get the same thing even though it's the same domain as the previous address.

This seems to be an impact of the 8dfcaaf change, but I have not found the reason for this error.

fpellet commented

I think the reason is that confirmationTimestamp is not reset.
So I see two possibilities:

  • either there is a desire to set a ratelimit (6h), but in this case the error message is not correct
  • or it's an error, and you need to reset confirmationTimestamp
  • 👍1
albogdano commented

Yes, I think the error message is incorrect because of the fact that you can only change the email once every 6 hours.
It's a security feature and there should be a clear error message in the Scoold logs. I will mark this a a bug and fix it as soon as I can.

  • 👍1