Activate account manually

[erwanMarmelab]

When a user creates an account, they receive an activation link by email that can be opened only once. If a mail checker opens this link, the account is not activated but cannot be activated anmymre. Re-sending the activation email doesn't solve the problem, as the email client will visit the link again. As a consequence, such users can never be activated.

This has happened to us several times for customers using strong email security policies.

The solution we'd like to implement is to activate the account ourselves, using an API endpoint, then send the temporary password by email to the user. Something like:

const supabase = createClient(url, key, options);
await supabase.auth.api.activateAccount(userId);

The activateAccount function could just activate the user account without sending an email, by updating the database.