Describe the bug
Because of security reasons, users should undergo a special and well scrutinized process before they can be able to change the email linked to their accounts.
These processes should be:
Require a verification process:
Implement a multi-step verification process that involves sending a verification email or code to the new email address. This helps ensure that the user has control over the new address and prevents unauthorized changes.
Limit the number of changes:
Allow users to change their email addresses only a limited number of times within a specific timeframe. This can help prevent abuse and maintain data integrity.
Expected behavior
Users should be able to change their emails after going through the proper vetted process.
Describe the bug Because of security reasons, users should undergo a special and well scrutinized process before they can be able to change the email linked to their accounts. These processes should be:
Require a verification process: Implement a multi-step verification process that involves sending a verification email or code to the new email address. This helps ensure that the user has control over the new address and prevents unauthorized changes.
Limit the number of changes: Allow users to change their email addresses only a limited number of times within a specific timeframe. This can help prevent abuse and maintain data integrity.
Expected behavior Users should be able to change their emails after going through the proper vetted process.
Related issue.
Separate endpoint for email change