Forem Creators and Builders 🌱

Discussion on: Customer feedback for the email authentication

Collapse
 
9comindia profile image
9comindia

Thank you very much @djuber for the quick response.

and if smtp were disabled (your site was unable to send mail and knew it) you would have automatic login with no email verification as well

I didn't understand the above quoted text.
Our site not sending the email was an issue long ago, and it was resolved.

If you are suggesting an easy way for automatic email verification by disabling SMTP.., would you please elaborate on that.. how exactly can we make this happen..

thanks again.

Thread Thread
 
djuber profile image
Daniel Uber

There's a method named smtp_enabled? which is defined as "smtp username and smtp password are present, or a sendgrid api key is set". This is required to send mail (either through SMTP or through sendgrid's api).

If you removed the settings for sending email, you could send no mail (at all, not just user signup confirmations), but because you can send no mail, users are not required to verify their email address and logins are automatic.

This lowers the friction for new users, but at the same time opens your forem up to any number of abusive bot behaviors (spam users and postings) and disables any notifications (which would still show in user preferences, and would probably generate more support problems for you since users asked for notifications and never received them).

I wouldn't recommend disabling SMTP just to smooth the sign up process, mostly because of the additional confusion that would result from the broken functionality, but that's what the code says.