Replies: 1 comment
-
Hello @alevosia I think the way to solve this would be to require a verified email address on login. Another solution would be using a custom UI for the settings flow, but then it would still be possible to be changed with unverified email through the API - maybe not an issue for this use case. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hi.
We are currently migrating from Auth0 to Ory.
When a user that has signed up and is verified updates their email address, is there a way to make the user verify their email address first before the email of their Ory identity is updated?
Currently, when completing a Settings Flow, the user's email is immediately updated even if they haven't verified it. This can cause users losing access to their account if the new email address they have entered is wrong.
Beta Was this translation helpful? Give feedback.
All reactions