After creating a User object with a certain email and password, the User may decide to then PATCH their email address for the User model. Currently, there is a bug where after PATCH'ing a new email and verifying it, you can still sign in with the old email and same password, while simultaneously being able to sign in with the newly PATCH'ed email and originally POST'ed password. This is a bug, as we should not be able to sign in using the original/old email.
We will know when this issue is complete if we are able to PATCH a user's email address successfully, without any bugs
Summary:
After creating a
User
object with a certain email and password, theUser
may decide to then PATCH their email address for theUser
model. Currently, there is a bug where after PATCH'ing a new email and verifying it, you can still sign in with the old email and same password, while simultaneously being able to sign in with the newly PATCH'ed email and originally POST'ed password. This is a bug, as we should not be able to sign in using the original/old email.We will know when this issue is complete if we are able to PATCH a user's email address successfully, without any bugs