How does Devise confirmation deals with automatic clicks?

heartcombo / devise

Flexible authentication solution for Rails with Warden.

http://blog.plataformatec.com.br/tag/devise/

MIT License

24.03k stars 5.55k forks source link

Open collimarco opened 1 year ago

collimarco commented 1 year ago

I just realized that some spam checkers follow the links in the emails automatically:

Does Devise implement any form of protection from this automatic clicks?

It seems that Devise is using a normal GET request to confirm the accounts and this may confirm people that didn't click the link.

carlosantoniodasilva commented 1 year ago

Not at the moment, but I have thought about implementing an intermediate step to confirmation and sort of bypass that.