casdoor / casdoor

An open-source UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform with web UI supporting OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, RADIUS, Google Workspace, Active Directory and Kerberos
https://casdoor.org
Apache License 2.0
9.2k stars 1.09k forks source link

Email Regex Validation Issue in Signup Process #2957

Closed moemoequte closed 1 month ago

moemoequte commented 1 month ago

I have encountered an issue with email validation in the signup process when using Casdoor. Specifically, I have set the regex for the email option under 'Account items' in organizations to ^\d+@qq.com$, and I also applied the same regex ^\d+@qq.com$ for the email option under 'Signup items' in applications.

Despite this configuration, during the registration test, emails are still being sent to addresses that do not match this regex pattern. I believe that the regex validation should trigger at the point of sending the email verification, preventing emails from being sent to non-matching addresses. Instead, the current behavior sends the email first and only informs users about the invalid email during the final submission of registration, which is not efficient or user-friendly. This issue needs attention to ensure that emails are not sent to unintended recipients, improving both performance and user experience.

814666a8eca1d7009c9adc2cd181f69f

image

casbin-bot commented 1 month ago

@tangyang9464 @JalinWang @imp2002