heartcombo
No way to cancel email change with reconfirmable
Environment
- Ruby 3.0.3
- Rails 7.0.2.2
- Devise 4.8.1
Current behavior
When using confirmable with reconfirmable on, when you attempt to change your email address, you must click a link in an email sent to your new email address for the change to take effect.
If for whatever reason the email was not delivered, there's no way to cancel the email change. You get the mildly irritating message "Currently waiting confirmation for: [email protected]" on your account forever with no way to retain your previous email address, short of successfully switching it to something else then successfully switching back.
Expected behavior
Provide a way to cancel the email change request, or alternatively, stop showing that message on the account after a period (after the point the confirmation token expires?)
Another case: The user 1 accidentally enter a wrong email that belongs to someone else. User 2 gets the confirm email and can take over the other user's account. There is no way for User 1 to cancel this or take back control of their account again. The account has been updated to the User 2's email.
