shoppingio / community-feedback

Community Reporting (Bugs & Feedback)
1 stars 0 forks source link

Token validation issue, can't verify email address and no option to re-send verification #15

Closed abatardi closed 3 years ago

abatardi commented 3 years ago

PAGE URL:

Account registration / https://back.shopping.io/auth/email-confirmation?confirmation=

STEPS TO REPEAT (1,2,3,etc):

  1. Register for new account
  2. Wait a few minutes for email
  3. Click "Confirm Email" button

SHORT DESCRIPTION:

Account email verification fails with Bad Request (400) token.invalid error.

ISSUE:

JSON object returned: {"statusCode":400, "error":"Bad Request", "message": "token.invalid"}

A couple more issues with this: 1) No friendly error message displayed to end user, instead raw JSON response is returned. 2) Apparently no method to retry the email confirmation flow. Now user is "stuck" with invalid account, and can't add items to shopping cart or checkout.

abatardi commented 3 years ago

Also, once this happens, user is left in a completely "stuck" state where cart doesn't seem to clear, yet going to cart shows it is empty (API response shows all items in the cart, they just aren't being displayed on the page).

softstack commented 3 years ago

Hey @abatardi did you clicked twice on the button ?

abatardi commented 3 years ago

No idea. I guess if I had that would be another bug. Oh wait -- https://github.com/shoppingio/community-feedback/issues/18

abatardi commented 3 years ago

And even if I had doubled clicked and the front end had allowed that, there should be server side validation to prevent duplicate registration.

abatardi commented 3 years ago

Hey @abatardi did you clicked twice on the button ?

Watch your language please.

softstack commented 3 years ago

Thanks for your helpful feedback, we are investigating into your problem. Unfortunately that problem is based on strapi (The CMS that is used by beta.shopping.io) https://forum.strapi.io/t/got-status-code-400-bad-request-from-auth-email-confirmation/1460/27 working on it.