Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

security: alert user to confirm email with CERN login #862

Open
GraemeWatt opened this issue Mar 11, 2025 · 0 comments
Open

security: alert user to confirm email with CERN login #862

GraemeWatt opened this issue Mar 11, 2025 · 0 comments
Labels
complexity: medium priority: medium type: bug Indicates an unexpected problem or unintended behaviour

Comments

@GraemeWatt
Copy link
Member

GraemeWatt commented Mar 11, 2025

The invenio-oauthclient package (since v2.1.0 released 2022-12-19) now automatically confirms new users signed up with a CERN account (commit). See Auto-confirm user in the InvenioRDM docs. However, it seems that if users signed up to HEPData with a CERN account when an earlier version of invenio-oauthclient was deployed, and they did not confirm their email address at the time, they are now redirected to the home page with a URL https://www.hepdata.net/?message=Unauthorized.&code=401 without seeing the flash message asking them to resend the confirmation email from https://www.hepdata.net/confirm that was added in PR #177. A more user-friendly error message should be returned in this (relatively rare) case.

@GraemeWatt GraemeWatt added complexity: medium priority: medium type: bug Indicates an unexpected problem or unintended behaviour labels Mar 11, 2025
@github-project-automation github-project-automation bot moved this to To do in @HEPData Mar 11, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
complexity: medium priority: medium type: bug Indicates an unexpected problem or unintended behaviour
Projects
Status: To do
Development

No branches or pull requests

1 participant