hanko
hanko copied to clipboard
(Delayed) email verification link
Email verification is currently implemented via email passcodes that will be sent on account creation if email verification is enabled per config. Entering the passcode is required to proceed with account creation, so all email addresses will be verified in this setup.
If email verification is disabled per config, a passcode is not required and won't be sent. In this case, Hanko sets the email as verified on the first successful passcode login (which may never happen, e.g. if the user creates a passkey and always uses it).
For the latter scenario, as well as for admin-initiated actions such as creating a new user or adding an email address to an existing user, it would be beneficial to have a second type of email verification that works with a verification link and thus does not require the user to enter a passcode.
This new verification email could either be user-initiated (e.g. user clicks a "verify my email address" link somewhere) or admin-initiated (e.g. admin adds a new email address to an existing user and requests email verification).
Hi @FlxMgdnz i am new to open source, eager to contribute. Seeking guidance to start my journey. Any help appreciated. Thank you!