clients icon indicating copy to clipboard operation
clients copied to clipboard

Email verfication invalid state

Open jblachly opened this issue 4 years ago • 6 comments

Describe the Bug

A break in the email verification flow leads to invalid application state.

Steps To Reproduce

  1. Register for new account
  2. Login
  3. Click "send verification email"
  4. Open verification email, click link
  5. (Web browser opens to vault login screen [even if logged in in another tab]; Green "email verified" status banner appears)
  6. Do not log in; instead, close the tab (because of course you are logged in in an adjacent tab
  7. Optionally refresh the adjacent, logged in tab, but this step probably does seem to affect state
  8. Unverified email box still appears -- click "send verification email"
  9. A red warning banner pops up indicating that the email verification has already been sent

The only way out of this invalid state, as far as I can tell, is to go back to the original email and re click the link, and successfully login.

Expected Result

Email verification flows should always offer the option to re-send the email

Actual Result

Clicking the "send verification email" warns the user that email was already sent (too bad)

Screenshots or Videos

Didn't think to capture

Environment

Firefox 84.0.1

jblachly avatar Jan 04 '21 04:01 jblachly

Clarifying question: when the warming about the verification email already being sent is shown, I'm assuming a new email is not sent? And/or that there is no option to proceed from/past that warning?

apmarshall avatar Jan 08 '21 21:01 apmarshall

Correct: new emails are not sent in response to the warning.

jblachly avatar Jan 08 '21 21:01 jblachly

Hi @jblachly, We're cleaning up our repositories in preparation for a major reorganization. Issues from last year will be marked as stale and closed after two weeks. If you still need help, comment to let us know and we'll look into it. Thanks!

bitwarden-bot avatar Apr 12 '22 19:04 bitwarden-bot

I mean, you can mark it stale, but if it wasn't ever addressed it seems unwise to close it just because the developers aren't commenting on it and keeping it active.

jblachly avatar Apr 13 '22 13:04 jblachly

Hey @jblachly after following the steps, it appears the error message is actually verifying that the email has already been confirmed and can be resolved by logging out and back in. We can definitely improve this by intercepting the error message, so thank you for the feedback.

dwbit avatar Apr 14 '22 11:04 dwbit

Just read through this thread, looks like PR #3552 from Issue #2800 might help out with this.

schang1146 avatar Sep 21 '22 19:09 schang1146

Closed as completed with #3552

djsmith85 avatar May 10 '23 09:05 djsmith85