You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When signing into Notify.gov, the system checks to see if the user's email needs to be verified and if so, redirects them to a verification page until they do.
With the switch to using Login.gov, this check is being skipped and we need to make sure it's wired up properly so that we continue having the 90 day verification checks with Notify.gov itself.
Implementation Sketch and Acceptance Criteria
Review the existing email verification check in our sign in code, which is tied to the custom app-specific sign in form
Add the verification check to the Login.gov sign in code (perhaps here?)
Test that the verification is working - you can do this locally by modifying the email_access_validated_at field in the users table for your user record to be some time in the past more than 90 days ago
Security Considerations
We need the email verification checks to continue working in Notify.gov even with the switch to Login.gov.
The text was updated successfully, but these errors were encountered:
When signing into Notify.gov, the system checks to see if the user's email needs to be verified and if so, redirects them to a verification page until they do.
With the switch to using Login.gov, this check is being skipped and we need to make sure it's wired up properly so that we continue having the 90 day verification checks with Notify.gov itself.
Implementation Sketch and Acceptance Criteria
email_access_validated_at
field in theusers
table for your user record to be some time in the past more than 90 days agoSecurity Considerations
The text was updated successfully, but these errors were encountered: