Not clear how register (and login) works about usermanager HOT 8 CLOSED

1. This is because the service requires a user confirms themselves through a link in an email that is sent to them after they register. Once they confirm themselves, then they can login and get the access token.

2. Though it looks like you need to be authenticated to login to the service, the login route is actually using the JWTAuthenticatableMiddleware to login the user when the route is called. The request must have username and password keys in the request body.

from usermanager.

1. From your description, I understood that you can disable email confirmation
2. When does this authentication happen?

from usermanager.

Correct, you can disable it. However, this makes it so an existing admin user has to create accounts for people.

The authentication happens before the route handler is run in the middleware chain in JWTAuthenticatableMiddleware.

from usermanager.

@dev4jam Would you want users to just register without any validation? (neither email nor admin)
I'm curious if there is a use-case for this.

from usermanager.

I have a real use-case: we are registering influencer on our platform for them. We just create an account with their email address. Not sure if admin confirmation should work in this case.

from usermanager.

@calebkleveter Do you think we can somehow rearrange the config so that this case would work too? I agree that there are cases for it though it's not very common anymore.

from usermanager.

I'll take a look at this.

from usermanager.

Fixed in 8f623b5

from usermanager.