When new users fill out the registration form on the landing page, we need to send a short email to the email address they provided. For now, the message can include their password until we validate password with two password input fields.
The email should have a link to a specific route on our web app that can be parsed to identify the user. It's too easy to just send their user id around in the URL, though. The email needs to contain their uuid from the mongo object representing that user.
thedouglenz
commented
10 years ago
When new users fill out the registration form on the landing page, we need to send a short email to the email address they provided. For now, the message can include their password until we validate password with two password input fields.
The email should have a link to a specific route on our web app that can be parsed to identify the user. It's too easy to just send their user id around in the URL, though. The email needs to contain their uuid from the mongo object representing that user.