[Discussion] New User Registration Confirmation emails & Associated Changes Needed

[chris48s]

When a new user signs up send them an email.

Questions:

• Is it just a simple confirmation of signup, does it also need a link to validate the email?
• If a validation link is needed, what's the endpoint for that? Does this feature span frontend and backend repos?
• How is the email delivered: What's your mail transport layer?

[BethanyG]

We'll also need the text of the confirmation email. Will we want to localize this, or are we sticking with English only for the MVP?

[lpatmo]

Thank you for beating me in filing this ticket!

Acceptance criteria (feel free to suggest edits):

[ ] Create API endpoint to validate the signup
[ ] Email template:

Hi there,
Thank you for signing up on codebuddies.org! 

Please click on the link to confirm your registration:
[LINK]

Notes: Possibly helpful blog post: https://medium.com/@blakeyang22/django-signup-with-activation-email-via-api-7384e6766710

Questions

Is it just a simple confirmation of signup, does it also need a link to validate the email?

We'll need a link to validate the email!

If a validation link is needed, what's the endpoint for that? Does this feature span frontend and backend repos?

Tentatively, we can make the endpoint auth/users/validate, maybe? Not sure. Suggestions welcome.

On the frontend, the user will see "Please check your email to validate your register" before they can see logged-in pages.

How is the email delivered: What's your mail transport layer?

Can we do mailhog on dev but Sparkpost in production? Is that possible -- or should we have Sparkpost on both?

We'll also need the text of the confirmation email. Will we want to localize this, or are we sticking with English only for the MVP?

Let's stick with English only!

[BethanyG]

Since we're now validating email addresses, we'll have to make changes to how we issue tokens.

I suggest we separate this out into several issues, so that we can be clearer on the changes needed.

[BethanyG]

Looks like we need to make a serializer change for this to work, but I will probably need to do some more digging. This SO Post on Email verification with JWT Has a starting point.

[BethanyG]

Ooof. If we are doing a validation email, do we also need a "thank you for validating" landing page when they click the link??

[lpatmo]

Yep -- in the React app, right? I was thinking we could redirect the user to their profile page upon registration or login, and show a banner/alert at the top that says "Thank you for validating!" if they came from a validation link.

(I'm still researching exactly how the validation process works)

[BethanyG]

Yup. It's that validation link that I am trying to think through. So taking a crack at a flow:

1. User fills out registration page and clicks [submit]
2. POST is sent to /auth/users/register
   (edit) --reply back from API is 403 - "email validation needed.."
3. User is created in backend DB with status of "unverified"
4. email is sent to user with validation link
5. ??front end message to user??
6. User logs into email and clicks validation link
7. ??This link hits a Django route (for flagging in the DB)??
8. Once flagging in DB happens, JWT token for login is issued
9. ??User is logged into their profile with "thank you" message??

OR

7. This link hits the front-end user profile page, and page makes request for token
8. Login Token is then requested with validation info -- maybe to auth/users/validate ??
9. DB updated with "validated" flag
10. Token issued.
11. ??message to user in UI they are validated and logged in??