Skip to content

rate-limiting user signup still sends (invalid) email #2078

Description

@cellio

I was trying to create test accounts on the new dev server and ran into the rate limit for new accounts -- after submitting the signup page I got a message like "you can't do that right now because there are too many requests from your IP". However, even though the server said the attempt failed, I got email -- but the link in the email did not work, giving a red-box error "Confirmation token is invalid".

The email address was not blocked; after waiting 5 minutes I tried again with the same address and it worked. So the messaging is misleading (we shouldn't send the email) but no real harm done otherwise.

Metadata

Metadata

Assignees

No one assigned

    Labels

    area: backendChanges to server-side code

    Type

    Fields

    No fields configured for Bug.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions