Dear Oryers! I just experienced something that I w...
# ory-network
c
Dear Oryers! I just experienced something that I would very much like to immediately eliminate as a possibility: We had a user who forgot their password. He used the regular recovery flow to reset his password, and after resetting it, his email is no longer verified. That is wildly strange, right? Disclaimer: We do use the settings.after webhook, which returns an empty object on success - could there be something that unverifies the email since it's not explicitly returned from our hook?
l
Did the user have uppercase characters in the email address by any chance? I noticed a bug related to that: https://github.com/ory/network/issues/273
🙌 1
c
I'm not entirely sure exactly how or why this happens, but - 🎺 you are correct!
All the emails that are failing have capital letters in them
We'll recreate all the affected users with normalized email addresses as a quickfix - a lot of our users are struggling to log in atm 😄
Obvs, we disabled email verification temporarily, but we really don't want to keep it disabled
l
Are you using the default settings page, or a custom UI?
c
A custom one
l
When you submit the change password form, does it also submit the email?
c
I see where you are going with this 😏. Let me double check!
b
Brandon is the MVP 👐
c
Oh hey Mikael!
👋 2
It looks like we don't actually ship the email alongside the password, only the password is in the form data here
l
We just ran into this bug, which is similar: https://github.com/ory/kratos/issues/3187
b
Nice that there's an issue on it! We ended up lowercasing emails ourselves too