luomus / meta

A meta-repo for adding items that don't belong anywhere else
0 stars 0 forks source link

Validate user emails #57

Open wkmor1 opened 6 days ago

wkmor1 commented 6 days ago

We have 1-2 problems on laji-auth:

1) Unclear if this is the case. But if third-party auth providers (like Facebook, Google, Apple...) decides to prevent us from using their auth, how can users login? Do all of them have valid emails on their account? If not, we should display a warning and ask users to add an email to their account. Can they use that to make a Laji.fi password for their account? They should.

"Tilillesi ei ole määritelty sähköpostiosoitetta. Lisää osoite - ilman sitä et voi palauttaa unohtunutta salasanaa [Lisää osoite]"

2) If user loses access to their email account, doesn't update it to our system, and then loses their password as well, they cannot login or recover the password. To prevent this, many sites regularly ask if users email is still valid. We should do this as well, e.g. once per year, at the same time reminding them to update their email if it changes.

"Onko nimi@example.fi edelleen sähköpostiosoitteesi? Päivitä sähköpostiosoite Laji.fi-tilillesi aina jos se muuttuu, muuten et voi palauttaa unohtunutta salasanaa. [kyllä, osoitteeni on nimi@example.fi] [ei, osoite on muuttunut]"