Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[node] Email validation flow #8

Open
bruderstein opened this issue Mar 10, 2017 · 0 comments
Open

[node] Email validation flow #8

bruderstein opened this issue Mar 10, 2017 · 0 comments

Comments

@bruderstein
Copy link
Owner

bruderstein commented Mar 10, 2017

In the user signup (auth.js, /api/auth/signup), we need to send an email with a random validation link (could be /validate?userid=23423&validity=.....). This link should probably contain some random identifier for the user (can add a guid to the user, for example), and then add a validation code. The validation code that is stored should be hashed (with something like SHA256), and the original code sent in the email.

The /validate route then needs to set the user to validated (set a value in the email doc), if hashing the validation code sent matches what is stored in CouchDB.

The email system should be added first (issue #7 )

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant