fix(auth): ensure email sending only happens to existing users #105

New issue

Closed

opened 2025-11-06 09:09:20 +00:00 by chartgerink · 0 comments

chartgerink commented

2025-11-06 09:09:20 +00:00

Owner

In testing the frontend integration with the backend for resetting a password, the logs indicate all emails entered are being sent emails.

This needs to be fixed as only existing users should actually receive emails. Otherwise it is a spam mechanism 🥲 Even if the tokens have claims that wont work.

In testing the frontend integration with the backend for resetting a password, the logs indicate all emails entered are being sent emails. This needs to be fixed as only **existing** users should actually receive emails. Otherwise it is a spam mechanism 🥲 Even if the tokens have claims that wont work.