OpenGrame icon indicating copy to clipboard operation
OpenGrame copied to clipboard

[BUG] Implement Email Verification to Prevent Unauthorized Sign-ups

Open Atharva1723 opened this issue 9 months ago • 4 comments

Description

Currently, our social media app allows users to sign up using any email address, even if it doesn't belong to them. This poses a security and privacy risk as anyone can create an account using someone else's email.

Steps to Reproduce:

Navigate to the sign-up page. Enter any email address, regardless of ownership. Complete the sign-up process without email verification.

Expected Behavior: Only users with access to the provided email address should be able to complete the sign-up process. Upon sign-up, an email verification step should be implemented to ensure the legitimacy of the provided email address.

Proposed Solution:

Implement email verification during the sign-up process. Upon sign-up, send a verification email to the provided email address with a unique verification link. Users should only be able to access their accounts after clicking the verification link and confirming their email ownership. Display appropriate error messages if the email address is already associated with an existing account or if the verification link is invalid or expired.

Expected Behavior: Only users with access to the provided email address should be able to complete the sign-up process. Upon sign-up, an email verification step should be implemented to ensure the legitimacy of the provided email address.

Atharva1723 avatar May 16 '24 15:05 Atharva1723