I should als note that the Email field is optional. Will making that mandatory slow things down? πŸ€” Be interesting to see what these bots are using? πŸ€” Make email verification before creation a thing? πŸ€”

​ Read More

@abucci@anthony.buc.ci Really don’t need to store the real email at all, just a token, using the same reset password jwt flows. Let it expire after like a few minutes. Click the link, verify token, cool, redirect to login, Otherwise, drop it on the floor.

​ Read More

Participate

Login to join in on this yarn.