SiLeBAT / fcl-server

0 stars 1 forks source link

Inconsistent registration process #119

Open j-hha opened 2 months ago

j-hha commented 2 months ago

Describe the bug The registration process doesn't always work reliably. Sometimes, double-opt-in (activation) emails do not reach the recipient. Other times, a newsletter registration is sent out instead of a DOI email.

For example: Attempts to register for production system

Testing on dev (all attempts to register only a few minutes apart):

To Reproduce Steps to reproduce the behavior:

  1. Go to 'https://fcl-portal.bfr.berlin/users/login' or 'https://fcl-portal-dev.bfr.berlin/users/login'
  2. Fill in the registration form and submit it
  3. Go to your email inbox and check, if you received the correct email - or any at all

Expected behavior When a new user registers, they should receive an activation link per email. If a registration fails and/or the user does not activate their account within the set timeframe (24h), the user should be removed from the databased automatically, so that they may try to register again.

When an existing user registers, they receive an email, asking them, to use the password reset function. This should only be send out to users that have actually managed activated their account.

Tbd: When should newsletter registration activation links be send out? Needs to be consistent.

Desktop (please complete the following information):

bfrgottscma commented 1 month ago

Further research is needed. Depending on the outcome, follow-up tickets might be needed (e.g. case study #121, monitoring, clearing user DB from users that do not have double opt in.