Skip to content

Allow the master key to bypass email verification #8230

Open
@mstniy

Description

@mstniy
Contributor

New Feature / Enhancement Checklist

  • I am not disclosing a vulnerability.
    I am not just asking a question.
    I have searched through existing issues.

Current Limitation

Currently email verification is either off, or Parse sends verification emails each time a user signs up or changes their email address.
Our team has a custom way of onboarding users, where they verify their email addresses out-of-band.
We would like the master key to be able to bypass email verification, suppress the sending of the verification email, and mark Parse users as emailVerified=true.

Feature / Enhancement Description

Signup requests as well as modifications to existing users where the email address is changed should not lead to a new email verification sequence, provided that the caller is the master key and the requests also sets the emailVerified field to true.

Example Use Case

  1. An existing user invites a new user to their organization
  2. Business logic sends an invitation email
  3. When a link in the email is clicked, a cloud function creates a Parse user for the email that is a member of the organization to which they were invited, without sending an additional verification email.

Alternatives / Workarounds

Turning off email verification for all users, implementing custom email verification logic.

3rd Party References

Activity

parse-github-assistant

parse-github-assistant commented on Oct 13, 2022

@parse-github-assistant

Thanks for opening this issue!

  • 🎉 We are excited about your ideas for improvement!
mtrezza

mtrezza commented on Oct 15, 2022

@mtrezza
Member

The feature design should consider #7144

mtrezza

mtrezza commented on Oct 17, 2022

@mtrezza
Member

Maybe incorporated into #7144 (comment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    type:featureNew feature or improvement of existing feature

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

      Development

      Participants

      @mtrezza@mstniy

      Issue actions

        Allow the master key to bypass email verification · Issue #8230 · parse-community/parse-server