Re-send confirmation request about php-auth HOT 3 CLOSED

Thanks for your appreciation!

Everything you said was correct and this is definitely a missing feature that we must add. I'd even say this should have the highest priority, since undelivered emails can be quite frequent depending on how you sent your emails, and inattentive users will cause problems, anyway.

Regarding the implementation, I wouldn't make that method public but instead create a simple wrapper. This gives us two advantages: The new wrapper can have a meaningful name like resendConfirmation and we can do some additional database queries in the wrapper. First, we could check that the last request has been a while ago, i.e. you shouldn't be able to request a new confirmation just ten minutes after the first one. Second, as you said, we should invalidate the old request.

Thanks for the hint, this is absolutely needed!

from php-auth.

That sounds great!
Rate limiting would definitely be needed too, should be configurable in some way. Maybe just by passing a min number of seconds that should have passed to resendConfirmation.

from php-auth.

Implemented in:

• b7a47fc
• d86d7ff
• 2839743
• 381e05f
• 0bbf9d3
• f83ac96
• c9a4e28
• 27adc9f
• b3d37ad

This is available in a new major version, v6.0.0, which comes with a few breaking changes. For a guide on how to upgrade, please see the migration notes in Migration.md.

from php-auth.