civio/onodo

Make account confirmation mandatory on sign up

Opened this issue · 0 comments

When a user signs up there is a grace period of two days while the user is allowed to access the website without confirming their account.

This means that if the users don't confirm their account, their access will be blocked just in the third day.

There's an steady incoming stream of support requests related to this feature from users that don't confirm their accounts and then complain about being unable to access the site.

Should we remove the two day period to avoid any access without account confirmation? Or should we fall back to sending the confirmation email when someone is asking for a password reset on an unconfirmed account?